NVD

Id
24237  
Name
CVE-2015-2068  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allow remote attackers to inject arbitrary web script or HTML via the (1) profile parameter to web/magmi.php or (2) QUERY_STRING to web/magmi_import_run.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-02-24  
Modified Date
2016-11-29  
Seq
2015-2068  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
128366 24237 CVE-2015-2068 http://packetstormsecurity.com/files/130250/Magento-Server-MAGMI-Cross-Site-Scripting-Local-File-Inclusion.html  View
128367 24237 CVE-2015-2068 35996  View
128368 24237 CVE-2015-2068 74879  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6304 JVNDB-2015-001624 Magento サーバ用 MAGMI プラグインにおけるクロスサイトスクリプティングの脆弱性 Magento サーバ用 MAGMI (別名 Magento Mass Importer) プラグインには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-2068 79293 CVE-2015-2068 24237 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001624.html 2015-02-05 2015-02-27 View