CVE-2011-4762

CVE-2011-4762 affects Parallels Plesk Small Business Panel 10.2.0. The issue is that it sends incorrect Content-Type headers for certain resources, potentially enabling a remote attacker to exploit an interpretation conflict involving smb/app/top-categories-data/ and other files, with unspecified...

CVE-2011-4746

The billing system for Parallels Plesk Panel 10.3.1build1013110726.09 does not disable the SSL 2.0 protocol, which makes it easier for remote attackers to conduct spoofing attacks by leveraging protocol weaknesses...

PT-2011-5096 · Parallels · Parallels Plesk Small Business Panel

Name of the Vulnerable Software and Affected Versions: Parallels Plesk Small Business Panel version 10.2.0 Description: The Site Editor feature in Parallels Plesk Small Business Panel allows remote attackers to obtain ASP source code via a direct request to "wysiwyg/fckconfig.js". Note that the...

Micro CMS v1.0.1 - Persistent Cross Site Scripting Vulnerability

Document Title: =============== Micro CMS v1.0.1 - Persistent Cross Site Scripting Vulnerability Release Date: ============= 2011-07-12 Vulnerability Laboratory ID VL-ID: ==================================== 152 Product & Service Introduction: =============================== Parallels Plesk Panel...

Parallels Plesk v9.0.2b - Cross Site Scripting Vulnerability

Document Title: =============== Parallels Plesk v9.0.2b - Cross Site Scripting Vulnerability Release Date: ============= 2011-06-12 Vulnerability Laboratory ID VL-ID: ==================================== 153 Product & Service Introduction: =============================== Parallels Plesk Panel ist...

Parallels Plesk v9.0.2b - Cross Site Scripting Vulnerability

Document Title: =============== Parallels Plesk v9.0.2b - Cross Site Scripting Vulnerability Release Date: ============= 2011-06-12 Vulnerability Laboratory ID VL-ID: ==================================== 153 Product & Service Introduction: =============================== Parallels Plesk Panel ist...

Parallels Plesk 8.2 URL Redirection

Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability 1. OVERVIEW The Plesk versions from 7.0 to 8.2 are vulnerable to Open URL Redirection when "Enable [email protected]" access format, a new feature introduced in Plesk 7.0, is enabled in user preferences. 2. BACKGROUND Parallels Plesk...

Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability

Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability 1. OVERVIEW The Plesk versions from 7.0 to 8.2 are vulnerable to Open URL Redirection when "Enable [email protected]" access format, a new feature introduced in Plesk 7.0, is enabled in user preferences. 2. BACKGROUND Parallels Plesk...

Plesk Small Business Manager 10.2.0 and Site Editor - Multiple Vulnerabilities

XSS + SQL Injection in Plesk Small Business Manager 10.2 + Site Editor Vendor: Plesk Small Business Manager 10.2 + Site Editor Product Description URL http://www.parallels.com/products/small-business-panel/ Date: 2010-09-17 Author : David Hoyt – http://cloudscan.me Contact : [email protected] Home...

Plesk Small Business Manager 10.2.0 and Site Editor - Multiple Vulnerabilities

Plesk Small Business Manager 10.2.0 and Site Editor - Multiple Vulnerabilities XSS + SQL Injection in Plesk Small Business Manager 10.2 + Site Editor Vendor: Plesk Small Business Manager 10.2 + Site Editor Product Description URL http://www.parallels.com/products/small-business-panel/ Date:...

Plesk Small Business Manager 10.2 Cross Site Scripting / SQL Injection

XSS + SQL Injection in Plesk Small Business Manager 10.2 + Site Editor Vendor: Plesk Small Business Manager 10.2 + Site Editor Product Description URL http://www.parallels.com/products/small-business-panel/ Date: 2010-09-17 Author : David Hoyt – http://cloudscan.me Contact : [email protected] Home...

Parallels Plesk Sitebuilder Persistent Xss Vulnerability

Exploit for php platform in category web applications ======================================================== Parallels Plesk Sitebuilder Persistent Xss Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...

Plesk Server Administrator (PSA) LFI Vulnerability - Active Check

Plesk Server Administrator PSA is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Parallels System Automation (PSA) Local File Inclusion

No description provided by source. Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

Parallels System Automation (PSA) Local File Inclusion

Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: https://www.cp.site.com/servlet/Help?systemid=pem&booktype=login&helpid=changepassword&locale=/../../../../../../etc/passwd%00 Discoverd...

Parallels System Automation (PSA) - Local File Inclusion

Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: https://cp.site.com/servlet/Help?systemid=pem&booktype=login&helpid=changepassword&locale=/../../../../../../etc/passwd%00 Discoverd By:...

Parallels System Automation (PSA) - Local File Inclusion

Parallels System Automation PSA - Local File Inclusion Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

kernel security update

CentOS Errata and Security Advisory CESA-2010:0046 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

On plesk virtual host to mention the right-vulnerability warning-the black bar safety net

This virtual machine in a foreign country relatively popular. Safety performance is also very high, where the next record to mention the right methods. 1. mysql adminthe original rootand the default passwordsetupdidn't change,by mysql to provide the right 2. Parallels Plesk Control Panel,in 8 8 8...

Mac OS X 10.5.7 (.CHM File) Local Finder.app Denial of Service Exploit

No description provided by source. !/usr/bin/env python import os; print """ Mac OS X 10.5.7 Local Finder.app DoS .CHM By: DrIDE and s0kket Greets to offsec Tested on OS X 10.5.7 This will most likely kill more than this version. \n"""; fname = rawinput" Enter the filename you would like to...