Web application abuses : Plesk <= 10.4.4 / 11.x <= 1.0.9 XXE Injection Vulnerability

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 146377 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.105046

Categoría: Web application abuses

Título: Plesk <= 10.4.4 / 11.x <= 1.0.9 XXE Injection Vulnerability

Resumen: Plesk is prone to an XML external entity (XXE) injection; vulnerability.

Descripción: Summary:
Plesk is prone to an XML external entity (XXE) injection
vulnerability.

Vulnerability Impact:
An attacker can exploit this vulnerability to retrieve arbitrary
files from the vulnerable system or to execute code in the context of the affected application.

Affected Software/OS:
Plesk versions 10.4.4 and 11.0.9. Other versions may also be
affected.

Solution:
Ask the vendor for an update.

CVSS Score:
7.8

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:N/A:N

Copyright Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.105046
Categoría:	Web application abuses
Título:	Plesk <= 10.4.4 / 11.x <= 1.0.9 XXE Injection Vulnerability
Resumen:	Plesk is prone to an XML external entity (XXE) injection; vulnerability.
Descripción:	Summary: Plesk is prone to an XML external entity (XXE) injection vulnerability. Vulnerability Impact: An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system or to execute code in the context of the affected application. Affected Software/OS: Plesk versions 10.4.4 and 11.0.9. Other versions may also be affected. Solution: Ask the vendor for an update. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Copyright	Copyright (C) 2014 Greenbone AG