Read the docs

Bitrix Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Bitrix Project records in CISA KEV

No Bitrix Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bitrix 1 record MEDIUM

Records

1 record in Bitrix · all components

TI-2015-06878 CVE-2015-8356 · GHSA-jf7w-5c6x-8f53

Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for…

Priority MEDIUM 40

Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow remote authenticated users to execute arbitrary SQL commands via the (1) xls_profile parameter to admin/mcart_xls_import.p…

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.02731 Published 2017-04-14 No fix listed CWE-89
Open these records in search →