CVE-2011-4745: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the billing system for Parallels Plesk Panel 10.3.1build1013110726.09 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/index.php/default and certain other files...

PT-2011-5079

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 10.3.1 build1013110726.09 Description The issue concerns the billing system of Parallels Plesk Panel, where a password form field is generated without disabling the autocomplete feature. This makes it easier for...

PT-2011-5075

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 10.3.1 build1013110726.09 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the billing system. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML...

CVE-2011-4749: Undefined Security Weakness

The billing system for Parallels Plesk Panel 10.3.1build1013110726.09 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms on certain pages...