CVE:CVE-2006-2477
CNNVD:CNNVD-200605-352
管理接口Bitrix Site Manager 4.1.x存在跨站脚本攻击漏洞。远程攻击者可以借助未明输入注入任意Web脚本或HTML。
solution:Upgrade bitrix bitrix_site_manager to a higher version than 4.0.0,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.1.0,and avoid the version 4.0.0,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.1.0