Bitrix Site Manager 4.0.x suffers from a remote file inclusion and execution vulnerability.
7b62a61c54e53d330843b685ee3ff2a1179a09eaa2d32f06d6abc047f1a8410a
New exploit for an old already known remote file inclusion bug in Bitrix Site Manager.
6a154e2b2c0cb34ec95bc116539057ecf20f9aacc494e528616d099222de9582