CVE-2006-2476

CVE-2006-2476 describes an information disclosure vulnerability in Bitrix Site Manager 4.1.x, where the updater.log file is stored under the web root with inadequate access controls. This allows unauthenticated remote attackers to access sensitive information. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication or complex attack vectors for exploitation, and primarily impacts confidentiality. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.