CVE-2016-4010

Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data.

CVSS v3.0 NVD

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

92.87% chance of exploitation in the next 30 days, 100th percentile

Published

2017-01-23

Updated

2024-08-06

Proof-of-concept exploits (4)

• https://packetstormsecurity.com/files/137121/Magento-Unauthenticated-Arbitrary-File-Write…
• https://packetstormsecurity.com/files/137312/Magento-2.0.6-Unserialize-Remote-Code-Execut…
• brianwrf/Magento-CVE-2016-40106★ · 2016-05-25
• shadofren/CVE-2016-40102★ · 2020-08-10

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/magento_unserialize.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/39838

Security advisories

• https://magento.com/security/patches/magento-206-security-update
• http://netanelrub.in/2016/05/17/magento-unauthenticated-remote-code-execution

References

• CVE Record
• NVD entry

Related

• CVE-2017-12611
• CVE-2017-7494
• CVE-2017-8917
• CVE-2018-11761
• CVE-2018-11776
• CVE-2018-11788