Lucene search

MitreCVE-2007-2268

HistoryApr 25, 2007 - 8:19 p.m.

CVE-2007-2268

2007-04-2520:19:00

mitre

web.nvd.nist.gov

cve

2007

2268

swsoft plesk

windows

directory traversal

vulnerabilities

remote attackers

arbitrary files

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.039

Percentile

92.1%

JSON

Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a … (dot dot) in the locale_id parameter to (1) login.php3 or (2) login_up.php3.

Affected configurations

Nvd

Node

swsoftpleskMatch7.6.1windows

swsoftpleskMatch8.1.0windows

swsoftpleskMatch8.1.1windows

VendorProductVersionCPE
swsoftplesk8.1.1cpe:/a:swsoft:plesk:8.1.1:::
swsoftplesk7.6.1cpe:/a:swsoft:plesk:7.6.1:::
swsoftplesk8.1.0cpe:/a:swsoft:plesk:8.1.0:::

Vendor	Product	Version	CPE
swsoft	plesk	8.1.1	cpe:/a:swsoft:plesk:8.1.1:::
swsoft	plesk	7.6.1	cpe:/a:swsoft:plesk:7.6.1:::
swsoft	plesk	8.1.0	cpe:/a:swsoft:plesk:8.1.0:::

References

forum.swsoft.com/showthread.php?s=&postid=172761#post172761

kb.swsoft.com/en/1798

secunia.com/advisories/25036

www.osvdb.org/34081

www.osvdb.org/34082

www.securityfocus.com/bid/23639

www.vupen.com/english/advisories/2007/1588

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.039

Percentile

92.1%

JSON

Related for CVE-2007-2268