VYPR
← All vendors
Vendor

Swsoft

Products
8
CVEs
18
Across products
21
Status
Private

Products

8

Recent CVEs

18
  • CVE-2006-5028Sep 27, 2006
    Swsoft
    Plesk
    risk 0.07cvss —epss 0.46

    Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ (dot dot slash) in the file parameter in a chdir action.

  • CVE-2001-0476Jun 27, 2001
    Swsoft
    Aspseek
    risk 0.04cvss —epss 0.10

    Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.

  • CVE-2007-4892Sep 14, 2007
    Swsoft
    Plesk
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Windows allow remote attackers to execute arbitrary SQL commands via a PLESKSESSID cookie to (1) login.php3 or (2) auth.php3.

  • CVE-2007-4009Jul 26, 2007
    Swsoft
    Confixx
    risk 0.03cvss —epss 0.04

    PHP remote file inclusion vulnerability in admin/business_inc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the thisdir parameter.

  • CVE-2007-2268Apr 25, 2007
    Swsoft
    Plesk
    risk 0.03cvss —epss 0.04

    Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a .. (dot dot) in the locale_id parameter to (1) login.php3 or (2) login_up.php3.

  • CVE-2006-6451Dec 10, 2006
    Swsoft
    Plesk
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) get_password.php or (2) login_up.php3.

  • CVE-2006-2423May 17, 2006
    Swsoft
    Confixx
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the login parameter.

  • CVE-2006-1759Apr 13, 2006
    Swsoft
    Confixx
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in allgemein_transfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the jahr parameter.

  • CVE-2006-1754Apr 13, 2006
    Swsoft
    Confixx
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands via the SID parameter.

  • CVE-2004-2702Dec 31, 2004
    Swsoft
    Plesk
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 and 7.1 Reloaded allows remote attackers to inject arbitrary web script or HTML via the login_name parameter. NOTE: this might be the same vector as CVE-2006-6451.

  • CVE-2021-45007Feb 20, 2022
    Swsoft
    Plesk
    risk 0.00cvss —epss 0.01

    Plesk 18.0.37 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows an attacker to insert data on the user and admin panel. NOTE: the vendor states that this is only a site-specific problem on websites of one or more Plesk users

  • CVE-2007-6042Nov 20, 2007
    Swsoft
    Confixx Professional
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from…

  • CVE-2007-2269Apr 25, 2007
    Swsoft
    Plesk
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the locale_id parameter.

  • CVE-2006-3737Jul 21, 2006
    Swsoft
    Plesk
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in filemanager/filemanager.php in the control panel in SWsoft Plesk 8.0 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the file parameter.

  • CVE-2006-3348Jul 3, 2006
    Swsoft
    Hspcomplete
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier allow remote attackers to execute arbitrary SQL commands via the (1) type parameter in report.php and (2) level parameter in custom_buttons.php.

  • CVE-2006-3179Jun 23, 2006
    Confixx
    Confixx Pro
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in tools_ftp_pwaendern.php in Confixx Pro 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the account parameter.

  • CVE-2006-3180Jun 23, 2006
    Confixx
    Confixx Pro
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in ftp_index.php in Confixx Pro 3.0 allows remote attackers to inject arbitrary web script or HTML via the path parameter.

  • CVE-2005-1302May 2, 2005
    Swsoft
    Confixx
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field.