CVE-2005-1995

Published: Jun 15, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Bitrix Site Manager 4.0.x allows remote attackers to obtain sensitive information via direct request to (1) subscr_form.php or (2) dbquery_error.php, which reveals the path in an error message.

Affected (8)

Products: Bitrix: Bitrix Site Manager

Bitrix

1 product

Bitrix Site Manager

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Bitrix Bitrix Site Manager	Version 4.0.0
Bitrix Bitrix Site Manager	Version 4.0.2
Bitrix Bitrix Site Manager	Version 4.0.3
Bitrix Bitrix Site Manager	Version 4.0.4
Bitrix Bitrix Site Manager	Version 4.0.5
Bitrix Bitrix Site Manager	Version 4.0.6
Bitrix Bitrix Site Manager	Version 4.0.7
Bitrix Bitrix Site Manager	Version 4.0.8