CVE-2014-1634

CRÍTICO 9.8CVE-2014-1634 · Published 09/03/2020 · updated 17/06/2026

En resumen

CVE-2014-1634 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a advanced newsletter (magento).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 73.3% de las vulnerabilidades.
Solución: actualizar a 2.3.5 o posterior.

Package	Affected versions	Patched versions
advanced newsletter magento	`< 2.3.5`	`2.3.5`

Description

SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category_id/ PATH_INFO.

References

labs.integrity.pt/advisories/cve-2014-1634 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free