• Halloween is coming! To celebrate the occasion, we dusted off a couple of old skins, and even created a brand new one (Pixel).
    To get into the festive spirit, install the Skins extension.
  • The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

Critical Security Bug in Plesk for Windows 7.5.6

H

hipernet

Guest
Critical Security Bug in Plesk for Windows 7.5.6 - SOLVED

Anybody has tried to connect to the mysql instance what listen in port 8306?

OK, try it from any machine around the world, you can connect without password as the user admin, you can do DROP DATABASE psa if you want it.

Can be mysql for windows compiled with skip-grant-tables enabled?

This is terrible, horrible, and i hope you solve this today.


Last patch solve this.
Thanks for all.
 
laptop ~ # mysql -u admin -h xxxxxx.com -P 8306
ERROR 1130 (00000): #HY000Host 'blxxxxxxxx.dsl.telepac.pt' is not allowed to connect to this MySQL server
 
What version and revision of Plesk for Windows you have?

[root@XXX ~]# mysql -h XXXXXXXXX -P 8306 -u admin
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 11932 to server version: 4.1.12-nt

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql>


anymore?
 
You must log in or register to reply here.

Similar threads

Hangover2
Critical security issue fixed on 24–25 February 2026 (Plesk Obsidian 18.0.75 Update 1 / 18.0.76 Update 2) — request for vulnerability details
Replies
4
Views
10K
Hangover2
Hangover2
Hangover2
Question [Important] Plesk Security Advisory: Patch Arriving on 27th August 2026
Replies
11
Views
5K
Sebahat.hadzhi
Sebahat.hadzhi
R
Issue Three more CVEs for nginx just hit - one rated as critical with DoS and RCE possible
Replies
3
Views
3K
rhall
R
T
Question Assistance Required to Configure IIS Resource Limits in Windows Plesk
Replies
0
Views
2K
Thomas Oryon
T
T
Issue Bug: Plesk Nginx proxy stripping performance headers - CPU spikes on all woocommerce downloads
Replies
2
Views
2K
thinkjarvis
T
Back
Top