Spoofing

2011-12-1611:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.7%

JSON

The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not disable the SSL 2.0 protocol, which makes it easier for remote attackers to conduct spoofing attacks by leveraging protocol weaknesses.

CPENameOperatorVersion
parallels_plesk_paneleq10.3.1-build1013110726.9

CPE	Name	Operator	Version
	parallels_plesk_panel	eq	10.3.1-build1013110726.9

References

xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html