CVE:CVE-2005-1996
CNNVD:CNNVD-200506-134
Bitrix Site Manager 4.0.x 中的start.php脚本存在PHP远程文件包含漏洞，远程攻击者可以借助_SERVER[DOCUMENT_ROOT]参数来执行任意PHP代码。
solution:Upgrade bitrix bitrix_site_manager to a higher version than 4.0.0,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,and avoid the version 4.0.0,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8