hackersafe-plesk.txt

HackerSafe Labs - Security Advisory http://www.hackersafelabs.com SWsoft Plesk for Windows - SQL Injection Vulnerability Date: 9-11-07 Vendor: www.swsoft.com Package: Plesk for Windows Versions: v7.6.1, v8.1.0, v8.1.1, v8.2.0 Vendor Demo: https://plesk8.1win.demo.swsoft.com:8443/login.php3 Credit...

SWSoft Plesk 8.2 - login.php3 PLESKSESSID Cookie SQL Injection

SWSoft Plesk 8.2 - login.php3 PLESKSESSID Cookie SQL Injection source: https://www.securityfocus.com/bid/25646/info Plesk is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could...

Plesk Multiple Script PLESKSESSID Cookie SQL Injection

Binary data 4213.prm...

SWSoft Plesk 8.2 - 'login.php3' PLESKSESSID Cookie SQL Injection

source: https://www.securityfocus.com/bid/25646/info Plesk is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could allow an attacker to compromise the application, access or modif...

Plesk Multiple Script locale_id Parameter Traversal Arbitrary File Access

The remote host is running Plesk, a control panel used to administer and manage websites. The version of Plesk installed on the remote host fails to sanitize user-supplied input to the 'localeid' parameter of the 'login.php3', 'loginup.php', and 'top.php3' scripts before using it to access files...

Directory traversal

Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1 allows remote attackers to read arbitrary files via a .. dot dot in the localeid parameter...

Directory traversal

Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a .. dot dot in the localeid parameter to 1 login.php3 or 2 loginup.php3...

CVE-2007-2268

Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a .. dot dot in the localeid parameter to 1 login.php3 or 2 loginup.php3...

CVE-2007-2269

Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1 allows remote attackers to read arbitrary files via a .. dot dot in the localeid parameter...

CVE-2007-2269

CVE-2007-2269 affects SWsoft Plesk for Windows versions 8.1 and 8.1.1. It is a directory traversal vulnerability in top.php3 that allows remote attackers to read arbitrary files by supplying .. in the locale_id parameter. Exploitation details, affected versions beyond the listed ones, and remedia...

CVE-2007-2268

Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a .. dot dot in the localeid parameter to 1 login.php3 or 2 loginup.php3...

CVE-2007-2269

Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1 allows remote attackers to read arbitrary files via a .. dot dot in the localeid parameter...

CVE-2007-2268

CVE-2007-2268 : Multiple directory traversal vulnerabilities affect SWsoft Plesk for Windows (versions 7.6.1, 8.1.0, 8.1.1). The issue arises from unsafely handling the locale_id parameter in login.php3, login_up.php3 (and top.php3 per NASL) which allows an unauthenticated attacker to read arbitr...

CVE-2007-2269: Undefined Security Weakness

Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1 allows remote attackers to read arbitrary files via a .. dot dot in the localeid parameter...

plesk 8.1.1 - login.php3 Directory Traversal

plesk 8.1.1 - login.php3 Directory Traversal source: https://www.securityfocus.com/bid/23639/info Plesk is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the...

CVE-2007-2268: Undefined Security Weakness

Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a .. dot dot in the localeid parameter to 1 login.php3 or 2 loginup.php3...

plesk 8.1.1 - 'login.php3' Directory Traversal

source: https://www.securityfocus.com/bid/23639/info Plesk is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected...

CVE-2006-6451

Multiple cross-site scripting XSS vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 getpassword.php or 2 loginup.php3...

CVE-2006-6451

SWsoft Plesk 8.0.1 and earlier are affected by multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to get_password.php or login_up.php3. The issue is documented across CVE-2006-6451, with CVSSv2 base metrics indicating a mediu...

CVE-2006-6451: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 getpassword.php or 2 loginup.php3...