Posted by Egidio Romano on Feb 23
——————————————————————
Magento <= 1.9.2.2 (RSS Feed) Information Disclosure Vulnerability
——————————————————————
[-] Software Link:
[-] Affected Versions:
Version 1.9.2.2 and prior versions.
[-] Vulnerability Description:
The vulnerability is located in the /app/code/core/Mage/Rss/Helper/Order.php script,
specifically into the…