bitrix24 bitrix site manager vulnerabilities

Latest bitrix24 bitrix site manager CVEs

Newest publication first

1. CVE-2017-20122 Bitrix Site Manager Contact Form cross site scripting

   Published 2022-06-30

   Medium·CVSS 5.4 EPSS 0.54%

   A vulnerability classified as problematic was found in Bitrix Site Manager 12.06.2015. Affected by this vulnerability is an unknown functionality of the component Contact Form. The manipulation of the argument text with the input <img src="http://1"; on onerror="$(’p').text(’Hack...

2. CVE-2008-2052 Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter.

   Published 2008-05-02

   Medium·CVSS 6.1 EPSS 1.6%

   Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.