Lucene search

K
exploitdbGuanYuEDB-ID:28647
HistorySep 22, 2006 - 12:00 a.m.

PLESK 7.5/7.6 - 'FileManager.php' Directory Traversal

2006-09-2200:00:00
GuanYu
www.exploit-db.com
13

AI Score

7.4

Confidence

Low

source: https://www.securityfocus.com/bid/20155/info

PLESK is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid in further attacks.

Versions 7.5 Reload (and prior) and 7.6 for Windows are vulnerable to this issue; other versions may also be affected.

https://www.example.com:8443/filemanager/filemanager.php?cmd=chdir&file=../

AI Score

7.4

Confidence

Low

Related for EDB-ID:28647