Bitrix Site Manager Luki w zabezpieczeniach

Oś czasu

Wersja

4.0.x2
6.52
4.1.x2

Przeciwdziałanie

Official Fix2
Temporary Fix0
Workaround0
Unavailable4
Not Defined4

Wykorzystywanie

High0
Functional0
Proof-of-Concept6
Unproven2
Not Defined2

Wektor dostępu

Not Defined0
Physical0
Local2
Adjacent0
Network8

Uwierzytelnianie

Not Defined0
High0
Low4
None6

Interakcja z użytkownikiem

Not Defined0
Required2
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤52
≤64
≤70
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤56
≤60
≤72
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤42
≤52
≤64
≤70
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k6
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Versions (4): 4.0, 4.1, 6.5, 12.06.2015

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2022-03-237.37.0Bitrix Site Manager Vote Module Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.08CVE-2022-27228
2017-01-314.14.0Bitrix Site Manager Contact Form cross site scripting$0-$5k$0-$5kProof-of-ConceptNot Defined0.12CVE-2017-20122
2008-05-025.34.7Bitrix Site Manager redirect.php privilege escalation$0-$5k$0-$5kUnprovenUnavailable0.04CVE-2008-2052
2006-05-195.34.8Bitrix Bitrix Site Manager DNS Cache information disclosure$0-$5k$0-$5kProof-of-ConceptUnavailable0.00CVE-2006-2479
2006-05-194.64.4Bitrix Bitrix Site Manager cross site scripting$0-$5k$0-$5kProof-of-ConceptUnavailable0.00CVE-2006-2477
2006-05-184.34.1Bitrix Bitrix Site Manager cross site scripting$0-$5k$0-$5kProof-of-ConceptUnavailable0.00CVE-2006-2478
2006-05-185.35.0Bitrix Bitrix Site Manager information disclosure$0-$5k$0-$5kProof-of-ConceptUnavailable0.00CVE-2006-2476
2005-06-155.34.8Bitrix Bitrix Site Manager start.php privilege escalation$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2005-1996
2005-06-153.33.2Bitrix Site Manager dbquery_error.php Path information disclosure$0-$5k$0-$5kProof-of-ConceptNot Defined0.00
2005-06-155.35.0Bitrix Bitrix Site Manager Error Message subscr_form.php information disclosure$0-$5k$0-$5kProof-of-ConceptNot Defined0.00CVE-2005-1995

więcej wpisów autorstwa Bitrix

◂ PoprzedniPrzeglądKolejny ▸

Do you need the next level of professionalism?

Upgrade your account now!