A vulnerability has been identified in SWsoft Plesk, which could be exploited by attackers to gain unauthorized access to arbitrary files on a vulnerable system. This issue is caused by input validation errors in the "login.php3" and "login_up.php3" scripts when processing the "locale_id", which could be exploited to conduct directory traversal attacks and disclose the contents of arbitrary files.
Vulnerable Products
Vulnerable Software: SWsoft Plesk version 7.6.1 for WindowsSWsoft Plesk version 8.1.0 for WindowsSWsoft Plesk version 8.1.1 for Windows
