CVE-2006-2479

The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers to obtain sensitive…

published May 19, 2006

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers to obtain sensitive information and ultimately execute arbitrary PHP code via DNS cache poisoning that redirects the user to a malicious site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01911 · 79.6th percentile
Published
2006-05-19T17:00Z
EPSS history
Timeline
  • 19 MAY 17:00Z
    The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers to obtain sensitive…
    cvelistv5