CVE-2006-2478

Опубликовано: 19 мая 2006

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a HTTP POST request. NOTE: this issue has been referred to as "cross-site scripting," but that is inconsistent with the common use of the term.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.8:*:*:*:*:*:*:*

cpe:2.3:a:bitrix:bitrix_site_manager:4.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00658

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-f597-4rv5-wqc9

github

почти 4 года назад