Lucene search

K
cve[email protected]CVE-2011-4734
HistoryDec 16, 2011 - 11:55 a.m.

CVE-2011-4734

2011-12-1611:55:09
CWE-89
web.nvd.nist.gov
14
cve
sql injection
parallels plesk panel
remote code execution
information security

8.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

47.3%

Multiple SQL injection vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by file-manager/ and certain other files.

Affected configurations

NVD
Node
parallelsparallels_plesk_panelMatch10.2.0_build20110407.20
AND
microsoftwindows
OR
redhatenterprise_linuxMatch6.0

8.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

47.3%

Related for CVE-2011-4734