893 matches found
CVE-2007-2268: Undefined Security Weakness
Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a .. dot dot in the localeid parameter to 1 login.php3 or 2 loginup.php3...
CVE-2007-2269: Undefined Security Weakness
Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1 allows remote attackers to read arbitrary files via a .. dot dot in the localeid parameter...
plesk 8.1.1 - 'login.php3' Directory Traversal
source: https://www.securityfocus.com/bid/23639/info Plesk is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected...
CVE-2006-6451
Multiple cross-site scripting XSS vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 getpassword.php or 2 loginup.php3...
CVE-2006-6451
SWsoft Plesk 8.0.1 and earlier are affected by multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to get_password.php or login_up.php3. The issue is documented across CVE-2006-6451, with CVSSv2 base metrics indicating a mediu...
CVE-2006-6451: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 getpassword.php or 2 loginup.php3...
[MajorSecurity Advisory #34]Plesk 8 - Multiple Cross Site Scripting Issues
MajorSecurity Advisory 34Plesk 8 - Multiple Cross Site Scripting Issues Details ======= Product: Plesk Affected Version: = 8.0.1 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.swsoft.com/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by:...
Plesk 7.58.0 - login_up.php3 Cross-Site Scripting
Plesk 7.58.0 - loginup.php3 Cross-Site Scripting source: https://www.securityfocus.com/bid/21067/info Plesk is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to execute HTML and...
Plesk 7.58.0 - get_password.php Cross-Site Scripting
Plesk 7.58.0 - getpassword.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21067/info Plesk is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to execute HTML and...
Plesk 7.5/8.0 - 'get_password.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21067/info Plesk is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to execute HTML and script code in the context of the affected site, to...
Plesk 7.5/8.0 - 'login_up.php3' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21067/info Plesk is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to execute HTML and script code in the context of the affected site, to...
CVE-2006-5028
Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ dot dot slash in the file parameter in a chdir action...
CVE-2006-5028
Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ dot dot slash in the file parameter in a chdir action...
CVE-2006-5028
CVE-2006-5028 : A directory traversal flaw exists in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Windows, in filemanager/filemanager.php, where a crafted file parameter using ../ in a chdir action lets remote attackers list arbitrary directories. This is documented in the NVD entries, with the impa...
CVE-2006-5028: Undefined Security Weakness
Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ dot dot slash in the file parameter in a chdir action...
[PLESK 7.5 Reload] & [PLESK 7.6 for MS Windows] path passing and disclosure vulnerability
/-------------------------------------- PLESK 7.5 Reload and lower & PLESK 7.6 for M$ Windows path passing and disclosure Discovered By: GuanYu Email: [email protected] Website: HVA http://www.vnhacker.org --------------------------------------/ -| Description: |- PLESK is a powerful web control...
PLESK 7.57.6 - FileManager.php Directory Traversal
PLESK 7.57.6 - FileManager.php Directory Traversal source: https://www.securityfocus.com/bid/20155/info PLESK is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the...
PLESK 7.5/7.6 - 'FileManager.php' Directory Traversal
source: https://www.securityfocus.com/bid/20155/info PLESK is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected...
Plesk Control Panel <= 8.0.0 XSS vulnerability
Product: Plesk control panel Version: = 8.0.0 Vendor: SWSoft Inc. URL: http://www.swsoft.com/en/products/plesk/ VULNERABILITY CLASS: XSS Product Description Plesk is comprehensive server management software developed specifically for the Hosting Service Industry with the assistance of Web hosting...
