bitrix40xInclusion.txt

Vendor: Bitrix Product: Bitrix Site Manager 4.0.x Vulnerability: php including. Consequence: custom php code execution on server Risk: Critical Description: Due to unfiltered SERVERDOCUMENTROOT variable in file “\bitrix\modules\main\start.php”, hacker can upload php script from other server and...