Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

HTTP:MISC:MAGENTO-VIMEO-CSRF

Severity

Major

Recommended

No

Recommended Action

Drop

Category

HTTP

Keywords

Magento Vimeo Invalid Image Cross Site Request Forgery

Release Date

2018/01/18

Update Number

3027

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: Magento Vimeo Invalid Image Cross Site Request Forgery


This signature detects attempts to exploit a known vulnerability against Magento. The vulnerability is due to insufficient CSRF protections, that enables an attacker to upload arbitrary files (including PHP files) to a target server. A remote attacker can exploit this vulnerability by enticing a target authenticated user to visit a page. Successful exploitation could allow the attacker to execute arbitrary code with the privileges of Magento.

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out