Potent, in-the-wild exploits imperil customers of 100,000 e-commerce sites

Hackers are exploiting an extremely critical vulnerability found on almost 100,000 e-commerce websites. The vulnerability resides in the community and enterprise editions of Magento, the Internet’s No. 1 content management system. The bug gives unauthorized attackers full control of a vulnerable website. Attacks are coming from the IP addresses 62.177.177 and 185.232.218, which are both based in Russia. According to Incapsula, attacks are also coming from addresses located in China. The vulnerability can also be exploited to change the prices a Web merchant charges for specific items.”]

Source: https://arstechnica.com/information-technology/2015/04/potent-in-the-wild-exploits-imperil-customers-of-100000-e-commerce-sites/