İçeriğe atla
Noroxi

Bitrix kayıtları

bitrix üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

10 kayıt
  • CVE-2015-8358
    38İzleyin

    Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators to include and execut

    KritikCVSS 9,0Kavram kanıtıEPSS %7

    bitrix · mpbuilder16 Ara 2015

  • CVE-2013-6788
    30İzleyin

    The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, which makes it eas

    YüksekCVSS 7,5İstismar yokEPSS %2

    bitrix · bitrix e-store module30 May 2014

  • CVE-2015-8357
    29İzleyin

    Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote authenticated users to rename arbitrary f

    OrtaCVSS 6,5Kavram kanıtıEPSS %8

    bitrix · xscan16 Ara 2015

  • CVE-2020-13758
    24İzleyin

    modules/security/classes/general.post_filter.php/post_filter.php in the Web Application Firewall in Bitrix24 through 20.0.950 allows XSS by

    OrtaCVSS 6,1İstismar yokEPSS %1

    bitrix · bitrix241 Haz 2020

  • CVE-2006-2476
    21İzleyin

    Bitrix Site Manager 4.1.x stores updater.log under the web document root with insufficient access control, which allows remote attackers to

    OrtaCVSS 5,0İstismar yokEPSS %2

    bitrix · bitrix site manager19 May 2006

  • CVE-2006-2479
    21İzleyin

    The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers

    OrtaCVSS 5,0İstismar yokEPSS %2

    bitrix · bitrix site manager19 May 2006

  • CVE-2006-2478
    20İzleyin

    Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a HTTP POST request.

    OrtaCVSS 5,0İstismar yokEPSS %2

    bitrix · bitrix site manager19 May 2006

  • CVE-2005-1996
    20İzleyin

    PHP remote file inclusion vulnerability in start.php in Bitrix Site Manager 4.0.x allows remote attackers to execute arbitrary PHP code via

    OrtaCVSS 5,0İstismar yokEPSS %2

    bitrix · bitrix site manager15 Haz 2005

  • CVE-2005-1995
    20İzleyin

    Bitrix Site Manager 4.0.x allows remote attackers to obtain sensitive information via direct request to (1) subscr_form.php or (2) dbquery_e

    OrtaCVSS 5,0İstismar yokEPSS %1

    bitrix · bitrix site manager15 Haz 2005

  • CVE-2006-2477
    19İzleyin

    Cross-site scripting (XSS) vulnerability in the administrative interface Bitrix Site Manager 4.1.x allows remote attackers to inject arbitra

    OrtaCVSS 4,9İstismar yokEPSS %1

    bitrix · bitrix site manager19 May 2006