The remote code execution (RCE) vulnerability, or “shoplift” bug, was reported by Check Point Software Technologies in late January 2015. It affects both Magento Enterprise Edition and Magento Community Edition and allows attackers to obtain control over a store and its sensitive data, including personal customer information. Magento issued a patch for this issue on February 9, 2015.
PATCHED SITES
To determine if your site has been patched, enter your URL in the search box in the link here.
SOLUTION:
We will install security patch SUPEE-6285, this patch provides protection against several types of security-related issues, including information leaks, request forgeries, and cross-site scripting. – Jul 7, 2015
