Description

SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allows remote administrators to execute arbitrary SQL commands via the popularity[field_expr] parameter when the popularity[from] or popularity[to] parameter is set.

Remediation

References

CVE-2015-1397

Related Vulnerabilities

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4329)

WordPress Plugin PropertyHive Remote Code Execution (1.4.25)

Oracle HTTP Server CVE-2018-2561 Vulnerability (CVE-2018-2561)

WordPress Plugin Remove Yoast SEO comments Unspecified Vulnerability (1.0.4)

PHP Numeric Errors Vulnerability (CVE-2014-3669)

Severity

Medium

Classification

CVE-2015-1397 CWE-138

Tags

Missing Update Known Vulnerabilities