CVE-2015-2067

Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remote attackers to read…

published February 24, 2015

CVSS

—

EPSS

38%

Percentile

98.6

In the wild

Unconfirmed

What it is

Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.38460 · 98.6th percentile
Published: 2015-02-24T17:00Z

EPSS history

Timeline

24 FEB 17:00Z
Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remote attackers to read…
cvelistv5