Magento Forum

   
Comment form on product page problem
 
bones_ct
Jr. Member
 
Total Posts:  12
Joined:  2011-07-20
 

Hello, i just found a bug in magento where you could use your comment form to comment on other magento sites. It’s by modifying the action adress on the comment form . Is there a way to modify this path :
http:// [your-site-name] /review/product/post/id/ [product-id-nr] / becouse this is the actual vulnerability.

 
Magento Community Magento Community
Magento Community
Magento Community
Magento Community
Magento Community
    Back to top