CVE-2017-20122

CVE-2017-20122 affects Bitrix Site Manager 12.06.2015, specifically an unknown functionality in the Contact Form. The vulnerability arises from manipulating the text argument with the payload which leads to basic cross-site scripting. The attack can be launched remotely and the exploit has been ...

CVE-2008-2052

Bitrix Site Manager 6.5 is vulnerable to an open redirect vulnerability located in the redirect.php file. This flaw allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the goto parameter, which can be leveraged to conduct phishing and other social engineering...