Vulnerabilities

TI-2004-02572 CVE-2004-2702 · GHSA-cgvr-863q-564c

Cross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 and 7.1 Reloaded…

LOW 24

Cross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 and 7.1 Reloaded allows remote attackers to inject arbitrary web script or HTML via the login_name parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01926 Published 2007-10-06 No fix listed CWE-79

TI-2007-04714 CVE-2007-4892 · GHSA-pw46-jrhv-gmmq

Multiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for…

LOW 35

Multiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Windows allow remote attackers to execute arbitrary SQL commands via a PLESKSESSID cookie to (1) login.php3 or (2) auth.php3.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01216 Published 2007-09-14 No fix listed CWE-89

TI-2007-02187 CVE-2007-2269 · GHSA-qp76-4p7c-6pvj

Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1…

LOW 26

Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01439 Published 2007-04-25 No fix listed

TI-2007-02186 CVE-2007-2268 · GHSA-46f7-973c-q8p8

Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0…

LOW 29

Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03514 Published 2007-04-25 No fix listed

TI-2006-06198 CVE-2006-6451 · GHSA-g6h8-g3g9-q69c

Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier…

LOW 35

Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) get_password.php or (2) login_up.php3.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02465 Published 2006-12-10 No fix listed CWE-79

TI-2006-04844 CVE-2006-5028 · GHSA-vh49-8mpg-38x4

Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5…

MEDIUM 53

Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ (dot dot slash) in the file…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.46291 Published 2006-09-27 No fix listed