CVE-2011-4745

CVE-2011-4745: Multiple XSS vulnerabilities in the Parallels Plesk Panel billing system (10.3.1_build1013110726.09). The issue stems from inadequate input sanitization in a PHP script (e.g., admin/index.php/default), enabling remote attackers to inject arbitrary JavaScript/HTML. Exploitation stat...

CVE-2011-4853

CVE-2011-4853 affects Parallels Plesk Panel 10.4.4_build20111103.18. The Control Panel exposes an RFC 1918 (private) IP address within a web page, which allows remote attackers to read the page and potentially access sensitive information. Demonstrated by access to smb/user/list-data/items-per-pa...

CVE-2011-4755

Parallels Plesk Small Business Panel 10.2.0 is affected by CVE-2011-4755 due to improper validation of string data intended for XML storage. The root cause is parsing of crafted cookies, which can trigger a denial of service (parsing error) and potentially other unspecified impact. The vulnerabil...

CVE-2011-4759

Parallels Plesk Small Business Panel 10.2.0 is affected by a cross-domain Referer leakage issue. When handling GET requests with specific query strings (e.g., client@1/domain@1/hosting/file-manager/ and related paths), the application generates web pages containing external links, which can allow...

CVE-2011-4762

CVE-2011-4762 affects Parallels Plesk Small Business Panel 10.2.0. The issue is that it sends incorrect Content-Type headers for certain resources, potentially enabling a remote attacker to exploit an interpretation conflict involving smb/app/top-categories-data/ and other files, with unspecified...

CVE-2011-4754

CVE-2011-4754 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2.0. The issue allows remote attackers to inject arbitrary web script or HTML through crafted input to a PHP script, with examples including smb/app/available/id/apscatalog/...

CVE-2011-4741

The CVE-2011-4741 entry pertains to Parallels Plesk Panel 10.2.0 build 20110407.20. The Control Panel includes a database connection string within a web page, which allows remote attackers to obtain potentially sensitive information by reading the page at client@2/domain@1/hosting/aspdotnet/. The...

CVE-2011-4761

The CVE-2011-4761 entry concerns Parallels Plesk Small Business Panel 10.2.0, where the Content-Type header omits the charset parameter for certain resources (notably involving domains/sitebuilder_edit.php). This omission could allow remote attackers to achieve an unspecified impact via an interp...

CVE-2011-4749

Affected software: Parallels Plesk Panel 10.3.1_build1013110726.09. The vulnerability is that the billing system’s password field is generated with autocomplete enabled, enabling bypass of authentication by a user with an unattended workstation, as demonstrated on forms under admin/index.php/defa...

CVE-2011-4765

The CVE concerns Parallels Plesk Small Business Panel 10.2.0, where the Site Editor (SiteBuilder) feature fails to set the HTTPOnly flag on a Set-Cookie header. This omission allows scripts to access the cookie, potentially leaking sensitive information via cookies used by Wizard/Edit/Modules/Ima...

CVE-2011-4752

CVE-2011-4752 concerns SmarterTools SmarterStats 6.2.4100, where incorrect Content-Type headers for certain resources may enable a remote impact through an interpretation conflict involving frmCustomReport.aspx and related files. Affected scope includes SmarterStats, though possible that only cli...

CVE-2011-4768

Parallels Plesk Small Business Panel 10.2.0 Site Editor (SiteBuilder) omits the Content-Type header charset parameter for certain resources, which might allow remote attackers to cause an unspecified impact via a interpretation conflict involving Wizard/Edit/Modules/Image and related files. The a...

CVE-2011-4850

The CVE-2011-4850 entry affects Parallels Plesk Panel 10.4.4_build20111103.18, where the HTTPOnly flag is absent in a Set-Cookie header used by cookies (e.g., in help.php), allowing remote attackers to access cookie data via script. This could partially expose sensitive information as described. ...

Mandriva Update for php-pear MDVSA-2011:187 (php-pear)

Check for the Version of php-pear OpenVAS Vulnerability Test Mandriva Update for php-pear MDVSA-2011:187 php-pear Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for finch CESA-2011:1820 centos4 i386

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2011:1820 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

qemu-kvm security update

qemu-kvm-0.12.1.2-2.209.el62.1 - kvm-ccid-Fix-buffer-overrun-in-handling-of-VSCATR-messa.patch bz751312 - CVE: CVE-2011-4111 - Resolves: bz751312 CVE-2011-4111 qemu: ccid: buffer overflow in handling of VSCATR message rhel-6.2.z...

RedHat Update for netpbm RHSA-2011:1811-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu Update for linux-ec2 USN-1299-1

Ubuntu Update for Linux kernel vulnerabilities USN-1299-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12991.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-ec2 USN-1299-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Th...

Ubuntu: Security Advisory (USN-1303-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for icu CESA-2011:1815 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...