Bitrix Site Manager 6.5 redirect.php goto link following

EntryHistoryDiffjsonxmlCTI

A vulnerability classified as critical was found in Bitrix Site Manager 6.5. Affected by this vulnerability is an unknown code block of the file redirect.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Field	03/16/2015 05:00 PM	11/14/2017 01:48 PM
vendor	Bitrix	Bitrix
name	Site Manager	Site Manager
version	6.5	6.5
file	redirect.php	redirect.php
argument	goto	goto
cwe	59 (link following)	59 (link following)
cvss2_vuldb_basescore	4.3	4.3
cvss2_vuldb_tempscore	3.5	3.5
cvss2_vuldb_av	N	N
cvss2_vuldb_ac	M	M
cvss2_vuldb_au	N	N
cvss2_vuldb_ci	N	N
cvss2_vuldb_ii	P	P
cvss2_vuldb_ai	N	N
cvss2_nvd_av	N	N
cvss2_nvd_ac	M	M
cvss2_nvd_au	N	N
cvss2_nvd_ci	N	N
cvss2_nvd_ii	P	P
cvss2_nvd_ai	N	N
cvss3_meta_basescore	5.3	5.3
cvss3_meta_tempscore	4.7	4.7
cvss3_vuldb_basescore	5.3	5.3
cvss3_vuldb_tempscore	4.7	4.7
date	1209686400 (05/02/2008)	1209686400 (05/02/2008)
price_0day	$0-$5k	$0-$5k
cve	CVE-2008-2052	CVE-2008-2052
cve_nvd_published	1209686400	1209686400
cve_nvd_summary	Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter.	Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter.
xforce	42157	42157
xforce_title	Bitrix Site Manager redirect.php security bypass	Bitrix Site Manager redirect.php security bypass
xforce_identifier	bitrix-redirect-security-bypass	bitrix-redirect-security-bypass
risk	2	2
cvss3_vuldb_ui	N	N
location	Website	Website
cvss2_vuldb_e	U	U
cvss2_vuldb_rl	U	U
cvss2_vuldb_rc	UR	UR
cvss3_vuldb_e	U	U
cvss3_vuldb_rl	U	U
cvss3_vuldb_rc	R	R
cvss3_vuldb_av	N	N
cvss3_vuldb_ac	L	L
cvss3_vuldb_pr	N	N
cvss3_vuldb_s	U	U
cvss3_vuldb_c	N	N
cvss3_vuldb_i	L	L
cvss3_vuldb_a	N	N
url		http://xforce.iss.net/xforce/xfdb/42157
cve_assigned		1209686400 (05/02/2008)

◂ Previous Overview Next ▸

Do you need the next level of professionalism?

Upgrade your account now!