← Back to CVE List
CVE-2016-4010
Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt