Approved changes feed: RSS · Atom

cpe:2.3:a:bitrix:bitrix_site_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBitrix (b8068dd0-344d-5795-a796-3d2bbcc5e7e6)
ProductBitrix Site Manager (a427426a-6bd0-5572-bc12-6bd569efc2c2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6788 not_vulnerable 2026-06-08 05:05:06.952696 Details available
The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, which makes it easier for remote attackers to guess the cookie value and bypass authentication via a brute force attack.
Published: 2014-05-30T14:00:00.000Z
Updated: 2024-08-06T17:46:23.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2476 vulnerable 2026-06-08 04:49:06.835258 Details available
Bitrix Site Manager 4.1.x stores updater.log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.
Published: 2006-05-19T17:00:00.000Z
Updated: 2024-08-07T17:51:04.719Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.