CVE-2008-2052
MEDIUM EXPLOITEDBitrix24 Bitrix Site Manager - Open Redirect
Title source: ruleDescription
Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter.
Scores
CVSS v3
6.1
EPSS
0.0102
EPSS Percentile
77.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitation Intel
VulnCheck KEV
2024-09-19
Classification
CWE
CWE-601
Status
draft
Affected Products (1)
bitrix24/bitrix_site_manager
Timeline
Published
May 02, 2008
Tracked Since
Feb 18, 2026