CVE-2015-2067: Magmi Project Magmi

Medium severity, CVSS 5.0. EPSS: 38.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Affected products

• Magmi Project Magmi: affected versions not specified

Published 2015-02-24. Last modified 2026-06-17.