writeups.xyz / Magento – RCE & Local File Read with low privilege admin rights

Submitter : c2a

Date: 24 January 2019

Bounty : undisclosed

Vulnerabilities :

• LFI
• RCE
• Path Traversal

Programs :

• Magento

Authors :

• Daniel Le Gall (@Blaklis_)

Link :
https://blog.scrt.ch/2019/01/24/magento-rce-local-file-read-with-low-privilege-admin-rights/