Description
Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain.
References
- 20011221 twlc advisory: plesk (psa) allows reading of .php files mailing-list
- 3737 vdb-entry
- psa-php-reveal-source(7735) vdb-entry