CVE-2006-6451

This exploit demonstrates an HTML injection vulnerability in Plesk by injecting a script tag into the login_up.php3 page, which executes arbitrary JavaScript in the context of the affected site.

This exploit demonstrates an HTML injection vulnerability in Plesk 8.0.1 and prior versions. The PoC shows how an attacker can inject arbitrary HTML and script code via the URL, leading to potential credential theft or site manipulation.