Deprecated: Optional parameter $shortcode declared before required parameter $args is implicitly treated as a required parameter in /home/ashishka/public_html/wp-content/plugins/wp-cirrus/wp-cirrus.php on line 331

Warning: Cannot modify header information - headers already sent by (output started at /home/ashishka/public_html/wp-content/plugins/wp-cirrus/wp-cirrus.php:331) in /home/ashishka/public_html/wp-content/plugins/all-in-one-seo-pack/app/Common/Meta/Robots.php on line 89

Warning: Cannot modify header information - headers already sent by (output started at /home/ashishka/public_html/wp-content/plugins/wp-cirrus/wp-cirrus.php:331) in /home/ashishka/public_html/wp-includes/feed-rss2.php on line 8
Magento RCE bug | Web Hosting Stuff https://www.ashishkale.in Get solutions under one roof Mon, 04 May 2015 12:46:26 +0000 en-US hourly 1 Magento web e-commerce SUPEE-5344 critical RCE (remote code execution) vulnerability . https://www.ashishkale.in/magento-web-e-commerce-supee-5344-critical-rce-remote-code-execution-vulnerability/ https://www.ashishkale.in/magento-web-e-commerce-supee-5344-critical-rce-remote-code-execution-vulnerability/#respond Mon, 04 May 2015 12:41:27 +0000 http://www.ashishkale.in/?p=203 A patch to address the flaws was released on February 9, 2015 (SUPEE-5344 available here). Store owners and administrators are urged to apply the patch immediately if they haven’t done so already. RECOMMENDED ACTIONS: 1. Check for unknown files in the web server document root directory. If you find any, you may be impacted. 2. Download and implement 2 patches [...]

The post Magento web e-commerce SUPEE-5344 critical RCE (remote code execution) vulnerability . first appeared on Web Hosting Stuff.

]]> magento-security-update

A patch to address the flaws was released on February 9, 2015 (SUPEE-5344 available here). Store owners and administrators are urged to apply the patch immediately if they haven’t done so already.

RECOMMENDED ACTIONS:

1. Check for unknown files in the web server document root directory. If you find any, you may be impacted.

2. Download and implement 2 patches from the Magento Community Edition download page.

    • SUPEE-5344 – Addresses a potential remote code execution exploit (Added Feb 9, 2015)
    • SUPEE-1533 – Addresses two potential remote code execution exploits (Added Oct 3, 2014)

3. Implement and test the patches in a development environment first to confirm that they work as expected before deploying them to your production site.

Note: Different versions of the patch are available for Magento Community Edition 1.4.x through 1.9.x.

HOW TO DOWNLOAD?

You can access Magento’s Community Edition download page from here. Find “Magento Community Edition Patches” section and download the right security patch.

The post Magento web e-commerce SUPEE-5344 critical RCE (remote code execution) vulnerability . first appeared on Web Hosting Stuff.

]]> https://www.ashishkale.in/magento-web-e-commerce-supee-5344-critical-rce-remote-code-execution-vulnerability/feed/ 0