Avatar of leehanken
Flag for United Kingdom of Great Britain and Northern Ireland asked on

Why is a PCI Compliance Scan detecting phantom shopadmin.asp and DCShop CGI on Plesk Panel's port?

We are using Security Metrics scan to determine PCI compliance on our website, and it is coming up with the following two results.

TCP      8443      pcsync-https      7       We detected a vulnerable version of the DCShop CGI. This version does not properly protect user and credit card information. It is possible to access files that contain administrative passwords, [More]

TCP      8443      pcsync-https      4       'shopadmin.asp' is installed. Some versions of this script are vulnerable to SQL injection. Solution: Move to a different directory or use a different shopping cart. From VP-ASP 3.0 and higher set the following in shop\$config.asp const xAdminPage=youradminpagename.asp const xShowAdmin=No bugtraq id: 4861 Risk Factor: Medium BID : 4861

The trouble is the only thing running on port 8443 is Parallels Plesk Panel 10 for Linux, we do not even host either of the mentioned shopping carts. How can the scan be detecting something that is not even there?
VulnerabilitiesLinux SecurityWeb Servers

Avatar of undefined
Last Comment

8/22/2022 - Mon
Michael Worsham

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question

The Scan Technician is referring this to his supervisor in order to see if these test results can be overridden on this occasion.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes