CVE:CVE-2006-6451
CNNVD:CNNVD-200612-213
SWsoft Plesk 8.0.1及更早版本存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过传给(1)get_password.php或(2)login_up.php3的未明参数来注入任意Web脚本或HTML。
solution:Upgrade swsoft plesk to a higher version than 8.0.1,7.5,and avoid the version (,8.0.1],7.5