CVE:CVE-2007-4892
CNNVD:CNNVD-200709-186
Windows中SWSoft Plesk中存在多个SQL注入漏洞，远程攻击者可以借助对(1) login.php3或者(2) auth.php3的PLESKSESSID cookie执行任意SQL指令。
solution:Upgrade swsoft plesk to a higher version than 7.6.1,8.1,8.1.1,8.2,and avoid the version 7.6.1,8.1,8.1.1,8.2