CVE-2007-2268

EPSS 3.5%

Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a .. (dot dot) in the locale_id parameter to (1) login.php3 or (2) login_up.php3.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/29898unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://forum.swsoft.com/showthread.php?s=&postid=172761#post172761 http://kb.swsoft.com/en/1798 http://secunia.com/advisories/25036 http://www.osvdb.org/34081 http://www.osvdb.org/34082 http://www.securityfocus.com/bid/23639 http://www.vupen.com/english/advisories/2007/1588