CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-2476

Bitrix Site Manager 4.1.x stores updater.log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 76.1%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2006-2476

Bitrix » Bitrix Site Manager » Version: Any

cpe:2.3:a:bitrix:bitrix_site_manager:*
Bitrix » Bitrix Site Manager » Version: 4.0.0

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.0
Bitrix » Bitrix Site Manager » Version: 4.0.2

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.2
Bitrix » Bitrix Site Manager » Version: 4.0.3

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.3
Bitrix » Bitrix Site Manager » Version: 4.0.4

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.4
Bitrix » Bitrix Site Manager » Version: 4.0.5

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.5
Bitrix » Bitrix Site Manager » Version: 4.0.6

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.6
Bitrix » Bitrix Site Manager » Version: 4.0.7

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.7
Bitrix » Bitrix Site Manager » Version: 4.0.8

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-2476

Products

Pricing

Contact Us