Swsoft

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Swsoft records in CISA KEV

No Swsoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Confixx 6 records LOW Plesk 6 records MEDIUM Aspseek 1 record MEDIUM Confixx Professional 1 record LOW Hspcomplete 1 record LOW Plesk Control Panel 1 record LOW Plesk Reload 1 record MEDIUM

Records

16 records

TI-2006-04844 CVE-2006-5028 · GHSA-vh49-8mpg-38x4

Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5…

MEDIUM 53

Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ (dot dot slash) in the file…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.46291 Published 2006-09-27 No fix listed

TI-2001-00468 CVE-2001-0476 · GHSA-x95q-59mj-wfrx

Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier…

MEDIUM 45

Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09573 Published 2001-05-24 No fix listed

TI-2006-01700 CVE-2006-1754 · GHSA-m952-hxw9-x5rv

SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows…

LOW 36

SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands via the SID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01748 Published 2006-04-13 No fix listed

TI-2007-04714 CVE-2007-4892 · GHSA-pw46-jrhv-gmmq

Multiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for…

LOW 35

Multiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Windows allow remote attackers to execute arbitrary SQL commands via a PLESKSESSID cookie to (1) login.php3 or (2) auth.php3.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01216 Published 2007-09-14 No fix listed CWE-89

TI-2006-06198 CVE-2006-6451 · GHSA-g6h8-g3g9-q69c

Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier…

LOW 35

Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) get_password.php or (2) login_up.php3.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02465 Published 2006-12-10 No fix listed CWE-79

TI-2006-03246 CVE-2006-3348 · GHSA-cfq9-j35v-mgwh

Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier…

LOW 35

Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier allow remote attackers to execute arbitrary SQL commands via the (1) type parameter in report.php and (2) level parameter in custom_but…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01114 Published 2006-07-03 No fix listed

TI-2005-01228 CVE-2005-1302 · GHSA-rmh4-hjcq-8xwg

SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to…

LOW 35

SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2005-04-26 No fix listed

TI-2006-03080 CVE-2006-3180 · GHSA-gf4c-w252-6hwh

Cross-site scripting (XSS) vulnerability in ftp_index.php in Confixx Pro 3.0 allows…

LOW 33

Cross-site scripting (XSS) vulnerability in ftp_index.php in Confixx Pro 3.0 allows remote attackers to inject arbitrary web script or HTML via the path parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01441 Published 2006-06-23 No fix listed

TI-2007-05776 CVE-2007-6042 · GHSA-mm6m-mjq9-r299

PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional…

LOW 32

PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01128 Published 2007-11-20 No fix listed CWE-94

TI-2007-02186 CVE-2007-2268 · GHSA-46f7-973c-q8p8

Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0…

LOW 29

Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03514 Published 2007-04-25 No fix listed

TI-2007-02187 CVE-2007-2269 · GHSA-qp76-4p7c-6pvj

Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1…

LOW 26

Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01439 Published 2007-04-25 No fix listed

TI-2006-02359 CVE-2006-2423 · GHSA-5xw6-w849-wvm9

Cross-site scripting (XSS) vulnerability in ftplogin/index.php in Confixx 3.1.2 allows…

LOW 24

Cross-site scripting (XSS) vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the login parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02083 Published 2006-05-17 No fix listed

TI-2004-02572 CVE-2004-2702 · GHSA-cgvr-863q-564c

Cross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 and 7.1 Reloaded…

LOW 24

Cross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 and 7.1 Reloaded allows remote attackers to inject arbitrary web script or HTML via the login_name parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01926 Published 2007-10-06 No fix listed CWE-79

TI-2006-03079 CVE-2006-3179 · GHSA-x642-x5w5-q86p

Cross-site scripting (XSS) vulnerability in tools_ftp_pwaendern.php in Confixx Pro 3.0…

LOW 23

Cross-site scripting (XSS) vulnerability in tools_ftp_pwaendern.php in Confixx Pro 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the account parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01342 Published 2006-06-23 No fix listed

TI-2006-03624 CVE-2006-3737 · GHSA-pqhj-g3p4-fphw

Cross-site scripting (XSS) vulnerability in filemanager/filemanager.php in the control…

LOW 22

Cross-site scripting (XSS) vulnerability in filemanager/filemanager.php in the control panel in SWsoft Plesk 8.0 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the file parameter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01218 Published 2006-07-19 No fix listed

TI-2006-01705 CVE-2006-1759 · GHSA-6hr8-jwvx-68rj

Cross-site scripting (XSS) vulnerability in allgemein_transfer.php in SWSoft Confixx…

LOW 17

Cross-site scripting (XSS) vulnerability in allgemein_transfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the jahr parameter.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02043 Published 2006-04-13 No fix listed

Open these records in search →

Critical	0
High	5
Medium	10
Low	1
No CVSS	0