CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-2477

Cross-site scripting (XSS) vulnerability in the administrative interface Bitrix Site Manager 4.1.x allows remote attackers to inject arbitrary web script or HTML via unspecified inputs.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.012

EPSS Ranking 67.8%

CVSS Severity

CVSS v2 Score 4.9

References

Products affected by CVE-2006-2477

Bitrix » Bitrix Site Manager » Version: 4.0.0

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.0
Bitrix » Bitrix Site Manager » Version: 4.0.2

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.2
Bitrix » Bitrix Site Manager » Version: 4.0.3

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.3
Bitrix » Bitrix Site Manager » Version: 4.0.4

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.4
Bitrix » Bitrix Site Manager » Version: 4.0.5

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.5
Bitrix » Bitrix Site Manager » Version: 4.0.6

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.6
Bitrix » Bitrix Site Manager » Version: 4.0.7

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.7
Bitrix » Bitrix Site Manager » Version: 4.0.8

cpe:2.3:a:bitrix:bitrix_site_manager:4.0.8
Bitrix » Bitrix Site Manager » Version: 4.1.0

cpe:2.3:a:bitrix:bitrix_site_manager:4.1.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-2477

Products

Pricing

Contact Us