OpenMage Installation Page Exposure Scanner

OpenMage is an open-source e-commerce platform forked from Magento 1, used by businesses and developers to build and manage online stores. It is valued for its stability, scalability, and community-driven updates, making it a reliable choice for e-commerce operations. Companies of various sizes rely on OpenMage to handle product catalogs, customer transactions, and order management. Developers often choose it for its flexibility and integration capabilities with payment gateways and third-party services. The platform requires technical expertise for installation and is typically hosted on dedicated servers.

The vulnerability involves the exposure of the OpenMage installation page, which is intended for initial setup only. This exposure arises from a misconfiguration where the installation script (e.g., install.php) remains accessible after deployment. Attackers can exploit this to reinstall the platform, potentially overwriting existing configurations and gaining administrative control. The issue is common when administrators forget to remove or restrict access to these files post-installation.

Technically, the scanner targets the /install.php endpoint or similar installation scripts in the OpenMage root directory. If these files are present and accessible, the scanner flags them as exposed. The vulnerability does not require authentication to exploit, as the installation page is typically unprotected by default. This makes it a high-risk issue for any OpenMage instance that has not been properly hardened after setup.

If exploited, an attacker can reinstall OpenMage, reset administrative credentials, and gain full control over the e-commerce platform. This could lead to data breaches, unauthorized transactions, and defacement of the online store. The impact is severe, as it compromises the entire e-commerce operation, including customer data and payment information. Immediate remediation is critical to prevent unauthorized access and maintain business continuity.