CVE-2013-6788: Bitrix E-Store Module

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, which makes it easier for remote attackers to guess the cookie value and bypass authentication via a brute force attack.

Affected products

• Bitrix Bitrix E-Store Module: up to and including 14.0.0

Published 2014-05-30. Last modified 2026-06-17.