NVD

Id
61173  
Name
CVE-2006-2478  
Description
Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a HTTP POST request. NOTE: this issue has been referred to as "cross-site scripting," but that is inconsistent with the common use of the term.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-05-19  
Modified Date
2011-03-07  
Seq
2006-2478  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
316163 61173 CVE-2006-2478 20060518 Multiple Vulns in Bitrix CMS  View
316164 61173 CVE-2006-2478 918  View
316165 61173 CVE-2006-2478 1016121  View
316166 61173 CVE-2006-2478 20060518 Multiple Vulns in Bitrix CMS  View
316167 61173 CVE-2006-2478 ADV-2006-1858  View
316168 61173 CVE-2006-2478 bitrixcms-backurl-url-redirect(26543)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61523 JVNDB-2006-003789 Bitrix Site Manager におけるユーザを他の Web サイトへリダイレクトされる脆弱性 Bitrix Site Manager には、ユーザを他の Web サイトへリダイレクトされる脆弱性が存在します。 CVE-2006-2478 18580 CVE-2006-2478 61173 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003789.html 2006-05-19 2013-12-26 View