Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Bitrix Subscribe
Filtered by product Mpbuilder
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-8358 1 Bitrix 1 Mpbuilder 2018-10-09 9.0 HIGH N/A
Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators to include and execute arbitrary local files via a .. (dot dot) in the element name of the "work" array parameter to admin/bitrix.mpbuilder_step2.php.