632 matches found
Plesk Mobile - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Plesk Mobile published at the 'play' market has multiple vulnerabilities...
PentestPackage - A Package of Multiple Pentest Scripts
Contents: Wordlists - Comprises of password lists, username lists and subdomains Web Service finder - Finds web services of a list of IPs and also returns any URL rewrites Gpprefdecrypt. - Decrypt the password of local users added via Windows 2008 Group Policy Preferences. rdns.sh - Runs...
Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities
No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl::2006/Sites...
Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities
Exploit for php platform in category web applications +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : email protected Risk : High Class: Remote Google Dork:...
Multiple Vulnerabilities in Parallels® Plesk Sitebuilder
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl::2006/Sites ext:aspx inurl::2006 inurl:.ashx?media...
Parallels Plesk 11.5.x - URL Protection Filter Bypass
Document Title: =============== Parallels Plesk 11.5.x - URL Protection Filter Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1331 View: https://www.youtube.com/watch?v=mjkWIFNJ2Sw Release Date: ============= 2014-10-13 Vulnerability Laboratory ID VL-ID:...
Parallels Plesk 11.5.x - URL Protection Filter Bypass
Document Title: =============== Parallels Plesk 11.5.x - URL Protection Filter Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1331 View: https://www.youtube.com/watch?v=mjkWIFNJ2Sw Release Date: ============= 2014-10-13 Vulnerability Laboratory ID VL-ID:...
Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl::2006/Sites ext:aspx inurl::2006 inurl:.ashx?media...
Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities
Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dor...
Plesk Sitebuilder XSS / Bypass / Shell Upload / File Download
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl::2006/Sites ext:aspx inurl::2006 inurl:.ashx?media...
Plesk 10.4.4/11.0.9 - SSO XXE/XSS Injection Exploit
No description provided by source...
crownweb (page.cfm) SQL Injection Vulnerability
No description provided by source. crownweb page.cfm Sql Injection Vulnerability =================================================================== .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : crownweb .:. Language : Cfm .:. Script Download:...
PLESK 7.5/7.6 - Filemanager.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20155/info PLESK is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system...
plesk <= 8.1.1 login.php3 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23639/info Plesk is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system...
Plesk Small Business Manager 10.2.0 and Site Editor - Multiple Vulnerabilities
No description provided by source...
Plesk < 9.5.4 - Zeroday Remote Exploit
No description provided by source. Plesk Apache zeroday / June 2013 discovered & exploited by kingcope this Plesk configuration setting makes it possible: scriptAlias /phppath/ /usr/bin/ Furthermore this is not cve-2012-1823 because the php interpreter is called directly. no php file is called...
Parallels PLESK 9.x - Insecure Permissions
No description provided by source. Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK panel is...
SWSoft Plesk <= 8.2 - login.php3 PLESKSESSID Cookie SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/25646/info Plesk is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could allow an attacker to compromis...
Plesk 7.5/8.0 - login_up.php3 XSS
No description provided by source. source: http://www.securityfocus.com/bid/21067/info Plesk is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to execute HTML and script code in the...
Plesk 7.5/8.0 - get_password.php XSS
No description provided by source. source: http://www.securityfocus.com/bid/21067/info Plesk is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to execute HTML and script code in the...