CVE-2012-1557: SQL Injection
SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU#2, 9.x before 9.5 MU#11, 10.0.x before MU#13, 10.1.x before MU#22, 10.2.x before MU#16, and 10.3.x before MU#5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in March 2012.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1557?
CVE-2012-1557 has a CVSS score indicating it is a critical severity vulnerability.
How do I fix CVE-2012-1557?
To fix CVE-2012-1557, update Parallels Plesk Panel to version 8.6 MU#2 or later, or to the appropriate version in the 9.x or 10.x series.
What versions of Parallels Plesk Panel are affected by CVE-2012-1557?
CVE-2012-1557 affects Parallels Plesk Panel versions 7.x through 10.3.x prior to their respective updates.
Can CVE-2012-1557 lead to database compromise?
Yes, CVE-2012-1557 allows remote attackers to execute arbitrary SQL commands, potentially compromising the database.
Is there a known exploit for CVE-2012-1557?
Although no specific exploit is widely published, the nature of CVE-2012-1557 indicates that it can be exploited through SQL injection techniques.