CVE-2016-4010 – Watch out a critical bug can fully compromise your Magento shop (Pierluigi Paganini, Security Affairs)

The vulnerability CVE-2016-4010 allows an unauthenticated attacker to execute PHP code at the vulnerable Magento server and fully compromise the shop

http://securityaffairs.co/wordpress/47439/hacking/cve-2016-4010-magento-flaw.html