Design/Logic Flaw

The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/admin-home/featured-applications/ and certain oth...

CVE-2011-4743

The CVE-2011-4743 entry concerns Parallels Plesk Panel 10.2.0, build 20110407.20, where the Control Panel omits the Content-Type header’s charset parameter for certain resources. This could allow remote attackers to cause an unspecified impact by exploiting an interpretation conflict involving sm...

CVE-2011-4854

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type data in HTML META elements, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving the...

CVE-2011-4761

Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving domains/sitebuilderedit.php and certain other files. NOTE: it is...

CVE-2011-4744

The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/admin-home/featured-applications/ and certain oth...

CVE-2011-4733

The CVE-2011-4733 entry concerns Parallels Plesk Panel 10.2.0_build1011110331.18 where the Server Administration Panel sends incorrect Content-Type headers for certain resources. The description indicates an interpretation conflict involving smb/admin-home/disable-featured-applications-promo and ...

CVE-2011-4856

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving admin/health/parameters and certain other files. NOTE: ...

CVE-2011-4855

The CVE-2011-4855 entry concerns Parallels Plesk Panel 10.4.4_build20111103.18, where the Control Panel omits the Content-Type header charset parameter for certain resources. This omission could allow remote attackers to cause an unspecified impact by exploiting an interpretation conflict involvi...

CVE-2011-4743

The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/user/create and certain other files...

CVE-2011-4744

The CVE-2011-4744 entry concerns Parallels Plesk Panel 10.2.0 build 20110407.20. The issue is that the Control Panel sends incorrect Content-Type headers for certain resources, which could allow remote attackers to cause an unspecified impact through an interpretation conflict involving smb/admin...

CVE-2011-4732

The CVE-2011-4732 entry concerns Parallels Plesk Panel 10.2.0_build1011110331.18. The issue is that the Server Administration Panel omits the Content-Type header's charset parameter for certain resources, which may enable remote attackers to cause an unspecified impact via an interpretation confl...

CVE-2011-4752

CVE-2011-4752 concerns SmarterTools SmarterStats 6.2.4100, where incorrect Content-Type headers for certain resources may enable a remote impact through an interpretation conflict involving frmCustomReport.aspx and related files. Affected scope includes SmarterStats, though possible that only cli...

CVE-2011-4768

Parallels Plesk Small Business Panel 10.2.0 Site Editor (SiteBuilder) omits the Content-Type header charset parameter for certain resources, which might allow remote attackers to cause an unspecified impact via a interpretation conflict involving Wizard/Edit/Modules/Image and related files. The a...

CVE-2011-4762

CVE-2011-4762 affects Parallels Plesk Small Business Panel 10.2.0. The issue is that it sends incorrect Content-Type headers for certain resources, potentially enabling a remote attacker to exploit an interpretation conflict involving smb/app/top-categories-data/ and other files, with unspecified...

CVE-2011-4752

SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving frmCustomReport.aspx and certain other files. NOTE: it is possible that only clients,...

CVE-2011-4768

The Site Editor aka SiteBuilder feature in Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving...

CVE-2011-4733

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving...

CVE-2011-4762

Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/app/top-categories-data/ and certain other files. NOTE: it is possible th...

CVE-2011-4761

The CVE-2011-4761 entry concerns Parallels Plesk Small Business Panel 10.2.0, where the Content-Type header omits the charset parameter for certain resources (notably involving domains/sitebuilder_edit.php). This omission could allow remote attackers to achieve an unspecified impact via an interp...

CVE-2011-4732

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving account/power-mode-logout...