Parallels Plesk 8.2 URL Redirection

Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability 1. OVERVIEW The Plesk versions from 7.0 to 8.2 are vulnerable to Open URL Redirection when "Enable [email protected]" access format, a new feature introduced in Plesk 7.0, is enabled in user preferences. 2. BACKGROUND Parallels Plesk...

Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability

Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability 1. OVERVIEW The Plesk versions from 7.0 to 8.2 are vulnerable to Open URL Redirection when "Enable [email protected]" access format, a new feature introduced in Plesk 7.0, is enabled in user preferences. 2. BACKGROUND Parallels Plesk...

Plesk Small Business Manager 10.2.0 and Site Editor - Multiple Vulnerabilities

XSS + SQL Injection in Plesk Small Business Manager 10.2 + Site Editor Vendor: Plesk Small Business Manager 10.2 + Site Editor Product Description URL http://www.parallels.com/products/small-business-panel/ Date: 2010-09-17 Author : David Hoyt – http://cloudscan.me Contact : [email protected] Home...

Plesk Small Business Manager 10.2.0 and Site Editor - Multiple Vulnerabilities

Plesk Small Business Manager 10.2.0 and Site Editor - Multiple Vulnerabilities XSS + SQL Injection in Plesk Small Business Manager 10.2 + Site Editor Vendor: Plesk Small Business Manager 10.2 + Site Editor Product Description URL http://www.parallels.com/products/small-business-panel/ Date:...

Plesk Small Business Manager 10.2 Cross Site Scripting / SQL Injection

XSS + SQL Injection in Plesk Small Business Manager 10.2 + Site Editor Vendor: Plesk Small Business Manager 10.2 + Site Editor Product Description URL http://www.parallels.com/products/small-business-panel/ Date: 2010-09-17 Author : David Hoyt – http://cloudscan.me Contact : [email protected] Home...

Parallels Plesk Sitebuilder Persistent Xss Vulnerability

Exploit for php platform in category web applications ======================================================== Parallels Plesk Sitebuilder Persistent Xss Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...

Plesk Server Administrator (PSA) LFI Vulnerability - Active Check

Plesk Server Administrator PSA is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Parallels System Automation (PSA) Local File Inclusion

No description provided by source. Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

Parallels System Automation (PSA) Local File Inclusion

Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: https://www.cp.site.com/servlet/Help?systemid=pem&booktype=login&helpid=changepassword&locale=/../../../../../../etc/passwd%00 Discoverd...

Parallels System Automation (PSA) - Local File Inclusion

Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: https://cp.site.com/servlet/Help?systemid=pem&booktype=login&helpid=changepassword&locale=/../../../../../../etc/passwd%00 Discoverd By:...

Parallels System Automation (PSA) - Local File Inclusion

Parallels System Automation PSA - Local File Inclusion Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

kernel security update

CentOS Errata and Security Advisory CESA-2010:0046 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

On plesk virtual host to mention the right-vulnerability warning-the black bar safety net

This virtual machine in a foreign country relatively popular. Safety performance is also very high, where the next record to mention the right methods. 1. mysql adminthe original rootand the default passwordsetupdidn't change,by mysql to provide the right 2. Parallels Plesk Control Panel,in 8 8 8...

Mac OS X 10.5.7 (.CHM File) Local Finder.app Denial of Service Exploit

No description provided by source. !/usr/bin/env python import os; print """ Mac OS X 10.5.7 Local Finder.app DoS .CHM By: DrIDE and s0kket Greets to offsec Tested on OS X 10.5.7 This will most likely kill more than this version. \n"""; fname = rawinput" Enter the filename you would like to...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft build 4.0.0-365.6.swsoft and 25.4.swsoft build 3.0.0-25.4.swsoft allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the "change password" feature in the VZPP web interface for Parallels Virtuozzo 25.4.swsoft build 3.0.0-25.4.swsoft allows remote attackers to modify the password via a link or IMG tag to vz/cp/pwd...

CVE-2008-6479

Cross-site request forgery CSRF vulnerability in the "change password" feature in the VZPP web interface for Parallels Virtuozzo 25.4.swsoft build 3.0.0-25.4.swsoft allows remote attackers to modify the password via a link or IMG tag to vz/cp/pwd...

CVE-2008-6478

Cross-site request forgery CSRF vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft build 4.0.0-365.6.swsoft and 25.4.swsoft build 3.0.0-25.4.swsoft allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag...

CVE-2008-6478

Cross-site request forgery CSRF vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft build 4.0.0-365.6.swsoft and 25.4.swsoft build 3.0.0-25.4.swsoft allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag...

CVE-2008-6479

The CVE-2008-6479 entry describes a CSRF vulnerability affecting Parallels Virtuozzo 25.4.swsoft (build 3.0.0-25.4.swsoft) in the VZPP web interface. The flaw allows remote attackers to modify the password via a crafted link or IMG tag to vz/cp/pwd. The vulnerability is tied to the web interface’...