PT-2015-2905

Name of the Vulnerable Software and Affected Versions bitrix.mpbuilder module versions prior to 1.0.12 Description The issue exists due to insufficient restriction of the directory path name in the bitrix.mpbuilder module of the 1С-Битрикс system. Exploitation of this issue may allow a remote...