Skip to main content

Bitrix E Store Module

1 CVEs product

Monthly

CVE-2013-6788 HIGH This Week

The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, which makes it easier for remote attackers to guess the cookie value and. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Bitrix E Store Module
NVD
CVSS 2.0
7.5
EPSS
0.4%
EPSS 0% CVSS 7.5
HIGH This Week

The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, which makes it easier for remote attackers to guess the cookie value and. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Bitrix E Store Module
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy