CVE-2013-6788

CVE-2013-6788 affects Bitrix Site Manager’s Bitrix e-Store module prior to 14.0.1. The vulnerability stems from sequential BITRIX_SM_SALE_UID cookie values, enabling remote unauthenticated attackers to guess cookie values by brute force and bypass authentication to view or manipulate another user...