CVE-2006-5028: Swsoft Plesk

Medium severity, CVSS 5.0. EPSS: 46.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ (dot dot slash) in the file parameter in a chdir action.

Affected products

• Swsoft Plesk: version 7.6 only
• Swsoft Plesk Reload: version 7.5 only

Published 2006-09-27. Last modified 2026-06-16.