However, the code is static. The vulnerabilities discovered in 2015, 2016, and 2017 are still present in 1.9.0.0 today. Newer versions of Magento 1 (like 1.9.3.x and 1.9.4.x) received backported patches for SQL injection, XSS, and RCE.
http://target.com/catalogsearch/result/index/?q=product&price[from]=1&price[to]=)
Magento, a popular e-commerce platform, has had several vulnerabilities over the years. One specific vulnerability affects Magento 1.9.0.0, which is an older version of the platform.
Numerous Proof of Concept (PoC) scripts were hosted on GitHub to demonstrate how the exploit functioned. While intended for security researchers and developers to test their own systems, these scripts were also utilized by malicious actors. Mitigation and Safety