Lorio
02-28-2007, 09:24 AM
A vulnerability in Plesk, a configuration tool for web servers and web hosting, may divulge Plesk's system password. The only thing you need to do is look for phpinfo and another string in a search in Yahoo or Google. Your password is then displayed in the hits along with data for the PHP and server configuration.
http://www.heise-security.co.uk/news/85975
http://www.heise-security.co.uk/news/85975