SQL Injection Vulnerability in Parallels Plesk Panel Products
CVE-2012-1557
Currently unrated
Key Information:
- Vendor
Parallels
- Status
- Vendor
- CVE Published:
- 12 March 2012
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2012-1557?
A SQL injection vulnerability exists in the Plesk Panel's Admin API that permits remote attackers to execute arbitrary SQL commands through unvalidated input. This flaw was notably exploited in the wild as of March 2012, potentially leading to unauthorized access and data manipulation. Version-specific updates were made to address this security issue, emphasizing the necessity for timely patching and awareness among users to mitigate potential exploits.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.