CVE:CVE-2006-2478
CNNVD:CNNVD-200605-371
Bitrix Site Manager 4.1.x可以使远程攻击者在HTTP POST请求期间借助一个经过修改的back_url,将用户重定向到其它网站。
solution:Upgrade bitrix bitrix_site_manager to a higher version than 4.0.0,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.1.0,and avoid the version 4.0.0,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.1.0