CVE-2016-4010 PoC — Magento 安全漏洞

Source

https://github.com/shadofren/CVE-2016-4010

Associated Vulnerability

Title: Magento 安全漏洞 (CVE-2016-4010)
Description:Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data.

Description

CVE-2016-4010

Readme

# CVE-2016-4010
CVE-2016-4010

Run exploit.php to generate the json payload

Run exploit.py with generated payload in trigger_vulnerability(payload)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →