Skip to content
OpenAdvisories

Package · Packagist

dweeves/magmi

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2017-7391 Scanner template

    Magmi XSS Vulnerability

    A Cross-Site Scripting (XSS) was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data (prefix) passed to the 'magmi-git-master/magmi/web/ajax_gettime.php' URL. An attacker could execute arbitrary HTML and…

    dweeves/magmi Packagist
  • Medium —
    CVE-2015-2067 Public exploit Scanner template EPSS 38%

    MAGMI plugin for Magento Server Directory Traversal

    Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

    dweeves/magmi Packagist
  • Medium —
    CVE-2015-2068 Public exploit Scanner template EPSS 14%

    MAGMI cross-site scripting (XSS)

    Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allow remote attackers to inject arbitrary web script or HTML via the (1) profile parameter to web/magmi.php or (2) QUERY_STRING to web/magm…

    dweeves/magmi Packagist