~/products/bitrix/mpbuilder

pipeline liveDigest Docs

Bitrix Mpbuilder vulnerabilities

1 known vulnerability affecting bitrix/mpbuilder.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2015-8358P3CRITICALCVSS 9.0PoC≤ 1.0.112015-12-16

CVE-2015-8358 [CRITICAL] CWE-22 CVE-2015-8358: Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows rem Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators to include and execute arbitrary local files via a .. (dot dot) in the element name of the "work" array parameter to admin/bitrix.mpbuilder_step2.php.