Magento Vulnerabilities
20 vulnerabilities related to Magento
- PoC2026-08-18CVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity Switch
- PoC2026-06-24CVE-2026-53787: Magento 2 Amasty Order Attributes < 4.0.0 - Unauthenticated Arbitrary File Upload
- PoC2026-04-09magento-polyshell-rce: Magento PolyShell – Unauthenticated File Upload to RCE
- PoC2026-01-16magento-debug-log-exposure: Magento Debug Log - Exposure
- PoC2026-01-08magento-downloader-fpd: Magento Downloader - Full Path Disclosure
- 2025-11-03Adobe Commerce/Magento SessionReaper /customer/address_file/upload 文件上传漏洞（CVE-2025-54236）
- 2025-11-03Adobe Commerce/Magento SessionReaper /customer/address_file/upload 文件上传漏洞（CVE-2025-54236）
- 2025-08-21Magento /rest/all/V1/guest-carts/test-assetnote/estimate-shipping-methods XML 外部实体注入漏洞（CVE-2024-34102）
- 2025-08-21Magento /rest/all/V1/guest-carts/test-assetnote/estimate-shipping-methods XML 外部实体注入漏洞（CVE-2024-34102）
- PoC2025-08-01CVE-2015-2067: Magento Server MAGMI - Directory Traversal
- PoC2025-08-01CVE-2015-2068: Magento Server Mass Importer - Cross-Site Scripting
- PoC2025-08-01CVE-2019-7139: Magento - SQL Injection
- PoC2025-08-01CVE-2020-5777: Magento Mass Importer <0.7.24 - Remote Auth Bypass
- PoC2025-08-01CVE-2024-34102: Adobe Commerce & Magento - CosmicSting
- PoC2025-08-01magento-config-disclosure: Magento Configuration Panel - Detect
- PoC2025-08-01magento-installer: Magento Installation Wizard
- PoC2025-08-01magento-cacheleak: Magento Cacheleak
- PoC2025-08-01magento-unprotected-dev-files: Magento Unprotected development files
- 2024-02-22Adobe Commerce and Magento Open Source Shipping Policy 存储型跨站脚本漏洞
- 2014-11-14Magento Community Edition MAGMI插件任意文件上传漏洞