Lucene search
+L

31 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/04/25 12:00 a.m.•6 views

CVE-2007-2269: Undefined Security Weakness

Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1 allows remote attackers to read arbitrary files via a .. dot dot in the localeid parameter...

5CVSS6AI score0.01439EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/04/25 12:00 a.m.•4 views

CVE-2007-2268: Undefined Security Weakness

Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a .. dot dot in the localeid parameter to 1 login.php3 or 2 loginup.php3...

5CVSS6AI score0.03514EPSS
SaveExploits1References1
NVD
NVD
•added 2006/12/10 9:28 p.m.•28 views

CVE-2006-6451

Multiple cross-site scripting XSS vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 getpassword.php or 2 loginup.php3...

6.8CVSS5.8AI score0.02401EPSS
SaveExploits3References5
CVE
CVE
•added 2006/12/10 9:00 p.m.•66 views

CVE-2006-6451

SWsoft Plesk 8.0.1 and earlier are affected by multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to get_password.php or login_up.php3. The issue is documented across CVE-2006-6451, with CVSSv2 base metrics indicating a mediu...

6.8CVSS6.1AI score0.02401EPSS
SaveExploits3References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/10 12:00 a.m.•7 views

CVE-2006-6451: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 getpassword.php or 2 loginup.php3...

6.8CVSS5.8AI score0.02401EPSS
SaveExploits3References2
NVD
NVD
•added 2006/09/27 11:07 p.m.•20 views

CVE-2006-5028

Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ dot dot slash in the file parameter in a chdir action...

5CVSS6.8AI score0.46576EPSS
SaveExploits2References6
CVE
CVE
•added 2006/09/27 11:00 p.m.•60 views

CVE-2006-5028

CVE-2006-5028 : A directory traversal flaw exists in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Windows, in filemanager/filemanager.php, where a crafted file parameter using ../ in a chdir action lets remote attackers list arbitrary directories. This is documented in the NVD entries, with the impa...

5CVSS6.1AI score0.46576EPSS
SaveExploits2References6Affected Software2
Cvelist
Cvelist
•added 2006/09/27 11:00 p.m.•30 views

CVE-2006-5028

Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ dot dot slash in the file parameter in a chdir action...

6.8AI score0.46576EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/27 12:00 a.m.•6 views

CVE-2006-5028: Undefined Security Weakness

Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ dot dot slash in the file parameter in a chdir action...

5CVSS6AI score0.46576EPSS
SaveExploits2References1
CVE
CVE
•added 2006/07/19 11:00 p.m.•81 views

CVE-2006-3737

CVE-2006-3737 describes a cross-site scripting (XSS) vulnerability in the filemanager/filemanager.php component of the SWsoft Plesk control panel (version 8.0 and earlier). The issue arises when an authenticated user supplies a crafted file parameter, allowing injection of arbitrary web script or...

4.3CVSS5.5AI score0.01218EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/07/19 12:00 a.m.•7 views

CVE-2006-3737: Undefined Security Weakness

Cross-site scripting XSS vulnerability in filemanager/filemanager.php in the control panel in SWsoft Plesk 8.0 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the file parameter...

4.3CVSS5.9AI score0.01218EPSS
SaveExploits1References1
Rows per page
Query Builder