Parallels Plesk 8.2 URL Redirection

Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability 1. OVERVIEW The Plesk versions from 7.0 to 8.2 are vulnerable to Open URL Redirection when "Enable [email protected]" access format, a new feature introduced in Plesk 7.0, is enabled in user preferences. 2. BACKGROUND Parallels Plesk...

CVE-2004-2702

CVE-2004-2702 is a cross-site scripting (XSS) vulnerability in SWsoft Plesk Reloaded's login_up.php3, exploitable via the login_name parameter. Affected are Plesk 7.0 and 7.1 Reloaded; root cause: failure to sanitize input to login_name. Impact: remote attacker can inject arbitrary script visible...

CVE-2004-2702: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in loginup.php3 in Plesk 7.0 and 7.1 Reloaded allows remote attackers to inject arbitrary web script or HTML via the loginname parameter. NOTE: this might be the same vector as CVE-2006-6451...