← Database

CVE-2005-1996

MEDIUM CVSS: 5.0 Published: 2005-06-15 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in start.php in Bitrix Site Manager 4.0.x allows remote attackers to execute arbitrary PHP code via the _SERVER[DOCUMENT_ROOT] parameter.

Affected Platforms

Bitrix Bitrix Site Manager

Weakness Type

CWE-94

References