CVE-2006-5028 – PLESK 7.5/7.6 - 'FileManager.php' Directory Traversal

https://notcve.org/view.php?id=CVE-2006-5028

Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ (dot dot slash) in the file parameter in a chdir action. Vulnerabilidad de atravesamiento de directorios en SWsoft Plesk 7.5 Reload y Plesk 7.6 para Microsoft Windows permite a un atacante remoto listar directorios de su elección a través de la secuencia ../ (punto punto barra) en el parámetro file en una acción chdir. • https://www.exploit-db.com/exploits/28647 http://secunia.com/advisories/22058 http://securityreason.com/securityalert/1643 http://www.securityfocus.com/archive/1/446730/100/0/threaded http://www.securityfocus.com/archive/1/470509/100/0/threaded http://www.securityfocus.com/bid/20155 https://exchange.xforce.ibmcloud.com/vulnerabilities/29134 •