Bitrix

bitrix

Vendor: Orion Soft • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2015-8355

1Orion Soft

1Bitrix

May 13, 2026

Aug 24, 2017

N/A· v4

8.8 HIGH· v3

6.5 MEDIUM· v2

Multiple SQL injection vulnerabilities in the orion.extfeedbackform module before 2.1.3 for Bitrix allow remote authenticated users to execute arbitrary SQL commands via the (1) order or (2) "by" parameter to admin/orion...Show more