Mattias Geniar personal blog

Magento eCommerce PHP Remote Code Execution

ma.ttias.be published 2015-04-213 min read

Critical remote code execution vulnerability in Magento (SUPEE-5344). Patch immediately. Affects 200,000 stores. Includes patch download and analysis.

Points

143

HN comments

78

Submissions

1

Cited by

0 commenters

Security & PrivacyWeb & Frontend2015

Related posts from the same era

Launching in 2015: A Certificate Authority to Encrypt the Entire Web

EFF Deeplinks20142,019 points461 commentscited by 6 details

Instagram's Million Dollar Bug

EEXFiLTRATED20151,562 points520 commentscited by 6 details

Amazon's customer service backdoor

Medium20161,447 points356 commentscited by 5 details

Reverse Engineering a Mysterious UDP Stream in My Hotel

LLeon Gkbrk20161,423 points181 comments details

Defending Our Brand

Let's Encrypt Blog20161,346 points263 commentscited by 4 details

The Dropbox hack is real

Troy Hunt20161,313 points539 commentscited by 4 details