SUPEE-6788 Security Patch

SUPEE 6788 is a Magento patch bundle for community versions 1.4.x, 1.5.x, 1.6.x, 1.7.x, 1.8.x to 1.9.2.2 and is specifically for security problems related to remote code execution, information leaks and cross-site scripting (XSS) exploits. If you are running your online store on Magento 1.4 to 1.9.2.2, then it is critical to apply the SUPEE 6788 security patch and close all related security holes and vulnerabilities.

SUPEE 6788 patches a security hole in Magento 1.4 to 1.9.2.2 version, which can lead to problems like error reporting in setup which exposes configuration, filter directives can allow access to protected data, XXE/XEE attack on Zend XML functionality using multi-byte payloads, potential SQL injection in Magento core model based classes, potential remote code execution using CRON, remote code execution/information leak using file custom option, cross site scripting with error messages/CSRF/Session fixation, potential remote code execution using error reports and downloadable products, admin path disclosure (dangerous), insufficient protection of password reset process, unprotected dev folder bug and cross-site scripting/cache poisoning . All of these are security issues that require your immediate attention.

Our Magento SUPEE 6788 patch service pack is aimed at helping you apply the SUPEE 6788 patch correctly to your Magento store. Our expert Magento team analyses your Magento store install, applies the patch correctly, tests its end to end and ensures all the patch is installed as expected. We run tests as well to ensure that the patch has closed all the related vulnerabilities. This service pack ensures you get the functionality you need for your store, done right by the experts.

Do you have a specific question about SUPEE 6788 patch installation for your Magento store? Please email us at [email protected] and we will get back to you within 24 hours.