| Package | Affected versions | Patched versions |
|---|---|---|
| bitrix site manager | = 4.0.0= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.0.8 |
Bitrix Site Manager 4.0.x allows remote attackers to obtain sensitive information via direct request to (1) subscr_form.php or (2) dbquery_error.php, which reveals the path in an error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free