CVE:CVE-2008-2052
CNNVD:CNNVD-200805-014
Bitrix Site Manager 6.5的redirect.php中存在的Open redirect vulnerability远程认证用户可以通过在goto参数中的一个URL来注入任意web站点和造成钓鱼攻击。
solution:Upgrade bitrix bitrix_site_manager to a higher version than 6.5,and avoid the version 6.5