CVE-2006-6451

Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) get_password.php or (2) login_up.php3.

• CWE-79

• http://marc.info/?l=bugtraq&m=116370467532206&w=2Mailing List
• http://securitytracker.com/id?1017236Exploit, Third Party Advisory, VDB Entry
• http://www.majorsecurity.de/index_2.php?major_rls=major_rls34Broken Link
• http://www.securityfocus.com/bid/21067Exploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30320
• http://marc.info/?l=bugtraq&m=116370467532206&w=2Mailing List
• http://securitytracker.com/id?1017236Exploit, Third Party Advisory, VDB Entry
• http://www.majorsecurity.de/index_2.php?major_rls=major_rls34Broken Link
• http://www.securityfocus.com/bid/21067Exploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30320

Published

Dec 10, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6445Directory traversal vulnerability in error.php in Envolution…
• CVE-2006-6446SQL injection vulnerability in index.php in iWare Profession…
• CVE-2006-6447Multiple cross-site scripting (XSS) vulnerabilities in Vt-Fo…
• CVE-2006-6448Multiple SQL injection vulnerabilities in Vt-Forum Lite 1.3 …
• CVE-2006-6449Vt-Forum Lite 1.3 and earlier store sensitive information un…
• CVE-2006-6450Multiple SQL injection vulnerabilities in dagent/downloadrep…
• CVE-2006-6452Multiple cross-site scripting (XSS) vulnerabilities in the M…
• CVE-2006-6453PHP remote file inclusion vulnerability in JOWAMP_ShowPage.p…
• CVE-2006-6454execInBackground.php in J-OWAMP Web Interface 2.1b and earli…
• CVE-2006-6455Multiple SQL injection vulnerabilities in admin/default.asp …
• CVE-2006-6456Unspecified vulnerability in Microsoft Word 2000, 2002, and …
• CVE-2006-6457tiki-wiki_rss.php in Tikiwiki 1.9.5, 1.9.2, and possibly oth…