CVE-2022-27228

In the vote aka "Polls, Votes" module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code...

CVE-2022-27228

In the vote aka "Polls, Votes" module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code...

Code injection

In the vote aka "Polls, Votes" module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code...

CVE-2022-27228

In the vote aka "Polls, Votes" module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code...

CVE-2022-27228

Bitrix Site Manager is vulnerable to a Remote Code Execution (RCE) flaw in the vote (also known as "Polls, Votes") module in versions prior to 21.0.100 . The root cause is identified as improper input validation (CWE-20 ), which allows a remote unauthenticated attacker to execute arbitrary code o...

EUVD-2022-31737

In the vote aka "Polls, Votes" module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code...

Bitrix Site Manager: Input validation error vulnerability

Bitrix Site Manager is a web site management system from Bitrix USA. A security vulnerability exists in Bitrix Site Manager prior to version 21.0.100. An unauthenticated attacker could remotely execute arbitrary code...

CVE-2022-27228: Improper Input Validation

In the vote aka "Polls, Votes" module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code...

PT-2022-1778

Name of the Vulnerable Software and Affected Versions Bitrix Site Manager versions prior to 21.0.100 Bitrix Site Manager versions 22.0.0 through 22.0.400 Bitrix Site Manager module Landing versions prior to 23.800.0 Description The 'vote' also known as "Polls, Votes" module in Bitrix Site Manager...

1C-Bitrix CMS Vote Module Arbitrary File Upload

Vulnerability of the “vote” module in the content management system CMS of 1C-Bitrix: Website management involves the ability to send specially crafted network packets. Exploiting this vulnerability can allow a malicious actor to upload arbitrary files into the vulnerable system...

CVE-2020-28206

The CVE-2020-28206 entry describes a vulnerability in Bitrix24 Bitrix Framework (1c site management) version 20.0 where a flaw in the admin login form allows user enumeration of administrator-group accounts and enables brute-force attempts on passwords for users not in the administrator group. Th...

PT-2020-16946

Name of the Vulnerable Software and Affected Versions Bitrix24 Bitrix Framework 1c site management version 20.0 Description An issue exists in the admin login form, allowing a remote user to enumerate users in the administrator group. This also allows brute-force attacks on the passwords of users...

CVE-2020-28206: Improper Restriction of Excessive Authentication Attempts

An issue was discovered in Bitrix24 Bitrix Framework 1c site management 20.0. An "User enumeration and Improper Restriction of Excessive Authentication Attempts" vulnerability exists in the admin login form, allowing a remote user to enumerate users in the administrator group. This also allows...

Bitrix Framework Security Vulnerability

Bitrix24 is a suite of enterprise social platforms from Bitrix USA. The platform includes features such as online communication, calendar management and CRM Customer Relationship Management. A security vulnerability exists in the Bitrix24 Bitrix Framework, which stems from an "improper restrictio...

1C-Bitrix Site Management Russia 2.0 Open Redirection

Exploit Title : 1C-Bitrix Site Management Russia 2.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 05/03/2019 Vendor Homepages : 1c-bitrix.ru bitrix24.com Software Information Link : 1c-bitrix.ru/support/...

street-beat.ru XSS vulnerability

Open Bug Bounty ID: OBB-707041 Description| Value ---|--- Affected Website:| street-beat.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Bitrix Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

minzdravkk.ru XSS vulnerability

Open Bug Bounty ID: OBB-674166 Description| Value ---|--- Affected Website:| minzdravkk.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Bitrix Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

volen.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-665871 Description| Value ---|--- Affected Website:| volen.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Sql injection

Multiple SQL injection vulnerabilities in the orion.extfeedbackform module before 2.1.3 for Bitrix allow remote authenticated users to execute arbitrary SQL commands via the 1 order or 2 "by" parameter to admin/orion.extfeedbackformefbfforms.php...

CVE-2015-8355

Multiple SQL injection vulnerabilities in the orion.extfeedbackform module before 2.1.3 for Bitrix allow remote authenticated users to execute arbitrary SQL commands via the 1 order or 2 "by" parameter to admin/orion.extfeedbackformefbfforms.php...