EUVD-2007-4873

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Windows allow remote attackers to execute arbitrary SQL commands via a PLESKSESSID cookie to 1 login.php3 or 2 auth.php3...

CVE-2007-4892: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Windows allow remote attackers to execute arbitrary SQL commands via a PLESKSESSID cookie to 1 login.php3 or 2 auth.php3...