CVE-2011-4735

Multiple cross-site scripting XSS vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by smb/user/create and certain other files...

CVE-2011-4725

Technical details (affected versions, root cause, exploit specifics, and fixes) are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2011-4725

Multiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by loginup.php3 and certain other files...

CVE-2011-4745

Multiple cross-site scripting XSS vulnerabilities in the billing system for Parallels Plesk Panel 10.3.1build1013110726.09 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/index.php/default and certain other files...

CVE-2011-4726: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/health/ and certain other files...

PT-2011-5084

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script. This is demonstrated by API endpoints such as...

CVE-2011-4735: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by smb/user/create and certain other files...

PT-2011-5064

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 10.2.0 build 20110407.20 Description The issue concerns SQL injection vulnerabilities in the Control Panel of Parallels Plesk Panel. These vulnerabilities allow remote attackers to execute arbitrary SQL commands b...

PT-2011-5065

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 10.2.0 build 20110407.20 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Control Panel of Parallels Plesk Panel. These vulnerabilities allow remote attackers to inject...

PT-2011-5093

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue concerns SQL injection vulnerabilities in the Site Editor feature of Parallels Plesk Small Business Panel. These vulnerabilities allow remote attackers to execute...

CVE-2011-4753: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by domains/sitebuilderedit.php and certain other files...

PT-2011-5075

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 10.3.1 build1013110726.09 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the billing system. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML...

PT-2011-5099

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 10.4.4 build20111103.18 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Control Panel of Parallels Plesk Panel. These vulnerabilities allow remote attackers to inject...

CVE-2011-4754: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by smb/app/available/id/apscatalog/ and certain other files...

CVE-2011-4750: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Default.aspx and certain other files...

CVE-2011-4776: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/update/settings/ and certain other files...

PT-2011-5056

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 10.2.0 build1011110331.18 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Server Administration Panel. These vulnerabilities allow remote attackers to inject arbitrary web...

PT-2011-5080

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.2.4100 Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script. This is demonstrated by files such as Default.aspx and certain other files...

DiyPage8. 3 orderby injection and code execution vulnerabilities-vulnerability warning-the black bar safety net

UPDATE: there is a large cattle say the EXP is bad so didn't want to explain please you with the time to spend a few seconds to look at the EXP code Here to fill the search keywords and the injection determination keywords As for what to look for I don't want to say too clear as long as you take...

CVE-2011-4046

The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, which allows context-dependent attackers to obtain sensitive information by examining script source code...