Critical Magento SQL Injection Flaw Could Soon Be Targeted By Hackers

itwbennett writes: The popular e-commerce platform Magento has released 37 security issues affecting both the commercial and open-source versions, four of which are critical. 'Of those, one SQL injection flaw is of particular concern for researchers because it can be exploited without authentication,' writes Lucian Constantine for CSO. Researchers from Web security firm Sucuri 'have already reverse-engineered the patch [for that flaw] and created a working proof-of-concept exploit for internal testing' says Constantin. 'The SQL vulnerability is very easy to exploit, and we encourage every Magento site owner to update to these recently patched versions to protect their ecommerce websites,' the researchers warn in a blog post.

What do you mean soon?

[Just A Gigolo]

It has been zero day for ages!

Adobe

[WaffleMonster]

Stopped reading after "Magento, an Adobe-owned company". It's not necessary to add any additional details to this article.

perfection is possible

[phantomfive]

This is one of the places perfection is possible, even easy. There are many methods for avoiding SQL injections, so choose a method and stick with it. Don't let this happen to you, be perfect.