CVE:CVE-2012-1557
CNNVD:CNNVD-201203-211
Parallels Plesk Panel 7.x版本和8.6 MU#2之前的8.x版本，9.5 MU#11之前的9.x版本，MU#13之前的10.0.x版本，MU#22之前的10.1.x版本，MU#16之前的10.2.x版本，和MU#5之前的10.3.x版本中的admin/plib/api-rpc/Agent.php中存在SQL注入漏洞。远程攻击者可利用该漏洞借助未明向量，执行任意SQL命令。
solution:Upgrade parallels parallels_plesk_panel to a higher version than 7.0,7.6.1,8.0,8.1,8.2,8.3,8.4,8.6,9.0,9.2,9.3,9.5,9.5.4,10.0.1:mu_#10,10.0.1:mu_#11,10.0.1:mu_#2,10.0.1:mu_#3,10.0.1:mu_#5,10.0.1:mu_#7,10.1.1:mu_#10,10.1.1:mu_#11,10.1.1:mu_#12,10.1.1:mu_#13,10.1.1:mu_#15,10.1.1:mu_#16,10.1.1:mu_#17,10.1.1:mu_#18,10.1.1:mu_#19,10.1.1:mu_#20,10.2.0:mu_#1,10.2.0:mu_#10,10.2.0:mu_#11,10.2.0:mu_#12,10.2.0:mu_#2,10.2.0:mu_#3,10.2.0:mu_#4,10.2.0:mu_#5,10.2.0:mu_#7,10.2.0:mu_#8,10.2.0:mu_#9,10.3.1:mu_#2,10.3.1:mu_#3,10.3.1:mu_#4,and avoid the version 7.0,7.6.1,8.0,8.1,8.2,8.3,8.4,8.6,9.0,9.2,9.3,9.5,9.5.4,10.0.1:mu_#10,10.0.1:mu_#11,10.0.1:mu_#2,10.0.1:mu_#3,10.0.1:mu_#5,10.0.1:mu_#7,10.1.1:mu_#10,10.1.1:mu_#11,10.1.1:mu_#12,10.1.1:mu_#13,10.1.1:mu_#15,10.1.1:mu_#16,10.1.1:mu_#17,10.1.1:mu_#18,10.1.1:mu_#19,10.1.1:mu_#20,10.2.0:mu_#1,10.2.0:mu_#10,10.2.0:mu_#11,10.2.0:mu_#12,10.2.0:mu_#2,10.2.0:mu_#3,10.2.0:mu_#4,10.2.0:mu_#5,10.2.0:mu_#7,10.2.0:mu_#8,10.2.0:mu_#9,10.3.1:mu_#2,10.3.1:mu_#3,10.3.1:mu_#4