Vulnerabilities > CVE-2006-2478 - Cross-Site Scripting vulnerability in Bitrix Site Manager

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
bitrix
NVD
Published: 2006-05-19
Updated: 2018-10-18

Summary

Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a HTTP POST request. NOTE: this issue has been referred to as "cross-site scripting," but that is inconsistent with the common use of the term.

Vulnerable Configurations

Part Description Count
Application
Bitrix
9

References