Unscored CVE-2006-3737 EUVD-2006-3731GHSA-pqhj-g3p4-fphw

Cross-site scripting (XSS) vulnerability in filemanager/filemanager.php in the control panel in SWsoft Plesk 8.0 and earlier allows remote …

Published Jul 19, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in filemanager/filemanager.php in the control panel in SWsoft Plesk 8.0 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the file parameter.

References

28596 vdb-entry
plesk-filemanager-xss(27770) vdb-entry
20060716 Plesk Control Panel <= 8.0.0 XSS vulnerability mailing-list
19017 vdb-entry
1250 third-party-advisory