CVE-2007-4892

EPSS 1.2%

Multiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Windows allow remote attackers to execute arbitrary SQL commands via a PLESKSESSID cookie to (1) login.php3 or (2) auth.php3.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/30577unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://kb.swsoft.com/en/2159 http://marc.info/?l=bugtraq&m=118960991517910&w=2 http://secunia.com/advisories/26741 https://exchange.xforce.ibmcloud.com/vulnerabilities/36580 http://www.osvdb.org/37009 http://www.securityfocus.com/bid/25646