CVE-2015-8358

The CVE-2015-8358 issue affects the Bitrix bitrix.mpbuilder module prior to 1.0.12. A path traversal/PHP File Inclusion vulnerability exists in the work[] parameter used by /bitrix/admin/bitrix.mpbuilder_step2.php, allowing an authenticated remote attacker to include and execute arbitrary local f...