Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Guanyu

Researcher fromHVA
#49027of 53,630
5Total CVSS
Vulnerabilities · 1
PT-2006-5769
5.0
2006-09-27
Swsoft · Plesk · CVE-2006-5028
**Name of the Vulnerable Software and Affected Versions** SWsoft Plesk versions 7.5 through 7.6 **Description** A directory traversal issue exists, allowing remote attackers to list arbitrary directories by using a ../ (dot dot slash) in the `file` parameter within a 'chdir' action in the filemanager/filemanager.php file. **Recommendations** For SWsoft Plesk versions 7.5 through 7.6, restrict access to the filemanager/filemanager.php file until a fix is available, and avoid using the `file` parameter in the 'chdir' action with untrusted input.