Security Bitrix mcart.xls 6.5.2 SQL Injection January 14, 2016 007admin Leave a comment Bitrix mcart.xls module versions 6.5.2 and below suffer from a remote SQL injection vulnerability.