Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Should add "AvisVerifies" #18

Closed
gwillem opened this issue Feb 13, 2019 · 5 comments

Comments

@gwillem
Copy link
Owner

commented Feb 13, 2019

@damienwebdev

This comment has been minimized.

Copy link

commented Mar 1, 2019

@gwillem are you asking for the module name?

@gwillem

This comment has been minimized.

Copy link
Owner Author

commented Mar 1, 2019

Indeed! The referenced article is now down, but it's still viewable via Google Cache (and I've made a local copy).

The attack vector is a POST to /index.php/AvisVerifies/dialog/index/, as was reported earlier by @pocallaghan

@damienwebdev

This comment has been minimized.

Copy link

commented Mar 1, 2019

Netreviews_Avisverifies

@gwillem

This comment has been minimized.

@damienwebdev

This comment has been minimized.

Copy link

commented Mar 1, 2019

@gwillem I believe there is a new version (v2.14.0), which no longer contains that constructor. https://marketplace.magento.com/netreviews-verifiedreviews.html#product.info.details.release_notes

Niko9911 added a commit to Niko9911/magevulndb that referenced this issue Jul 21, 2019

@rhoerr rhoerr closed this in #47 Jul 22, 2019

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
2 participants
You can’t perform that action at this time.