NVD

Id
28533  
Name
CVE-2015-8358  
Description
Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators to include and execute arbitrary local files via a .. (dot dot) in the element name of the "work" array parameter to admin/bitrix.mpbuilder_step2.php.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-12-16  
Modified Date
2016-12-07  
Seq
2015-8358  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
149897 28533 CVE-2015-8358 http://packetstormsecurity.com/files/134766/bitrix.mpbuilder-Bitrix-1.0.10-Local-File-Inclusion.html  View
149898 28533 CVE-2015-8358 20151209 PHP File Inclusion in bitrix.mpbuilder Bitrix Module  View
149899 28533 CVE-2015-8358 https://marketplace.1c-bitrix.ru/solutions/bitrix.mpbuilder/#tab-log-link  View
149900 28533 CVE-2015-8358 38975  View
149901 28533 CVE-2015-8358 https://www.htbridge.com/advisory/HTB23281  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11143 JVNDB-2015-006463 Bitrix 用 bitrix.mpbuilder モジュールにおけるディレクトリトラバーサルの脆弱性 Bitrix 用 bitrix.mpbuilder モジュールには、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2015-8358 85583 CVE-2015-8358 28533 9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006463.html 2015-11-25 2015-12-21 View