CVE-2016-4010

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://netanelrub.in/2016/05/17/magento-unauthenticated-remote-code-execution/Technical Description, Third Party Advisory
https://magento.com/security/patches/magento-206-security-updatePatch, Vendor Advisory
https://packetstormsecurity.com/files/137121/Magento-Unauthenticated-Arbitrary-File-Write.htmlExploit, Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/137312/Magento-2.0.6-Unserialize-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/39838/
http://netanelrub.in/2016/05/17/magento-unauthenticated-remote-code-execution/Technical Description, Third Party Advisory
https://magento.com/security/patches/magento-206-security-updatePatch, Vendor Advisory
https://packetstormsecurity.com/files/137121/Magento-Unauthenticated-Arbitrary-File-Write.htmlExploit, Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/137312/Magento-2.0.6-Unserialize-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/39838/

Timeline

Published: Jan 23, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-40148.6XML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of serv CVE-2016-40157.5The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a craft CVE-2016-40166.1Cross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) 15 allows remote attacke CVE-2016-40177.5The Data Provisioning Agent (aka DP Agent) in SAP HANA allows remote attackers to cause a denial of service (process crash) via unspecified CVE-2016-40187.3The Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to service functionality, which allows remote attac CVE-2016-40197.5Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 1044 CVE-2016-40206.5The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrat CVE-2016-40217.5The read_binary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a denial of service (infinite loop a CVE-2016-40249.8Integer overflow in imlib2 before 1.4.9 on 32-bit platforms allows remote attackers to execute arbitrary code via large dimensions in an ima CVE-2016-40255.5Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protect CVE-2016-40266.1An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The content sanitizer component has an issue with filtering malicio CVE-2016-40273.5An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10. App Suite frontend offers to control whether a user wants to store