Swsoft · Plesk · CVE-2006-5028
**Name of the Vulnerable Software and Affected Versions**
SWsoft Plesk versions 7.5 through 7.6
**Description**
A directory traversal issue exists, allowing remote attackers to list arbitrary directories by using a ../ (dot dot slash) in the `file` parameter within a 'chdir' action in the filemanager/filemanager.php file.
**Recommendations**
For SWsoft Plesk versions 7.5 through 7.6, restrict access to the filemanager/filemanager.php file until a fix is available, and avoid using the `file` parameter in the 'chdir' action with untrusted input.