Summary
Plesk is prone to a XXE Vulnerability.
Impact
An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system or to execute code in the context of the affected application.
Solution
Ask the vendor for an update.
Affected
Plesk versions 10.4.4 and 11.0.9
other versions may also be affected.
Detection
Send a special crafted HTTP POST request and check the response.
References
Updated on 2015-03-25
