CVE-2015-8358

The CVE-2015-8358 issue affects the Bitrix bitrix.mpbuilder module prior to 1.0.12. A path traversal/PHP File Inclusion vulnerability exists in the work[] parameter used by /bitrix/admin/bitrix.mpbuilder_step2.php, allowing an authenticated remote attacker to include and execute arbitrary local f...

PT-2015-2905

Name of the Vulnerable Software and Affected Versions bitrix.mpbuilder module versions prior to 1.0.12 Description The issue exists due to insufficient restriction of the directory path name in the bitrix.mpbuilder module of the 1С-Битрикс system. Exploitation of this issue may allow a remote...

CVE-2015-8358: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators to include and execute arbitrary local files via a .. dot dot in the element name of the "work" array parameter to admin/bitrix.mpbuilderstep2.php...

Bitrix bitrix.mpbuilder Module 1.0.10 - Local File Inclusion

Bitrix bitrix.mpbuilder Module 1.0.10 - Local File Inclusion Advisory ID: HTB23281 Product: bitrix.mpbuilder Bitrix module Vendor: www.1c-bitrix.ru Vulnerable Versions: 1.0.10 and probably prior Tested Version: 1.0.10 Advisory Publication: November 18, 2015 without technical details Vendor...

Bitrix bitrix.mpbuilder Module 1.0.10 - Local File Inclusion

Advisory ID: HTB23281 Product: bitrix.mpbuilder Bitrix module Vendor: www.1c-bitrix.ru Vulnerable Versions: 1.0.10 and probably prior Tested Version: 1.0.10 Advisory Publication: November 18, 2015 without technical details Vendor Notification: November 18, 2015 Vendor Patch: November 25, 2015...

bitrix.scan Bitrix 1.0.3 Path Traversal Vulnerability

bitrix.mpbuilder Bitrix module version 1.0.10 suffers from a local file inclusion vulnerability. Product: bitrix.mpbuilder Bitrix module Vendor: www.1c-bitrix.ru Vulnerable Versions: 1.0.10 and probably prior Tested Version: 1.0.10 Advisory Publication: November 18, 2015 without technical details...