CVE-2017-20122

CVE-2017-20122 affects Bitrix Site Manager 12.06.2015, specifically an unknown functionality in the Contact Form. The vulnerability arises from manipulating the text argument with the payload which leads to basic cross-site scripting. The attack can be launched remotely and the exploit has been ...

CVE-2008-2052

The CVE-2008-2052 entry describes an open redirect vulnerability in redirect.php of Bitrix Site Manager 6.5, exploitable via a URL in the goto parameter. The issue could allow remote attackers to redirect users to arbitrary sites, enabling phishing-style redirection. Affected component: Bitrix Si...