EUVD-2015-8241

Malware in sbrugna...

bitrix.xscan Bitrix Module Path Traversal Vulnerability

A path traversal vulnerability exists in the bitrix.xscan Bitrix module. Due to the lack of directory traversal character filtering e.g., ". /". A remotely authenticated attacker can upload a file with malicious content by passing this file through a vulnerable script in a renamed filename...