cbcvebase.

Magentocommerc Magento vulnerabilities

1 known vulnerability affecting magentocommerc/magento.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2009-0541P4MEDIUMCVSS 4.3PoCv1.2.0v1.2.1.12009-02-25
CVE-2009-0541 [MEDIUM] CWE-79 CVE-2009-0541: Multiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attack Multiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the username field in an admin/ request to index.php, possibly related to the login[username] parameter and the app/code/core/Mage/Admin/Model/Session.php login function; (2) the email address field in a
nvd
Magentocommerc Magento vulnerabilities | cvebase