CVE-2011-4761

The CVE-2011-4761 entry concerns Parallels Plesk Small Business Panel 10.2.0, where the Content-Type header omits the charset parameter for certain resources (notably involving domains/sitebuilder_edit.php). This omission could allow remote attackers to achieve an unspecified impact via an interp...

CVE-2011-4762

CVE-2011-4762 affects Parallels Plesk Small Business Panel 10.2.0. The issue is that it sends incorrect Content-Type headers for certain resources, potentially enabling a remote attacker to exploit an interpretation conflict involving smb/app/top-categories-data/ and other files, with unspecified...

CVE-2011-4763

The CVE-2011-4763 entry describes multiple SQL injection vulnerabilities in the Site Editor (SiteBuilder) feature of Parallels Plesk Small Business Panel 10.2.0. The issue allows remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, demonstrated in Wizard/Edit/Html...

CVE-2011-4764

CVE-2011-4764 describes multiple XSS vulnerabilities in the Site Editor (SiteBuilder) feature of Parallels Plesk Small Business Panel 10.2.0 . The issues allow remote attackers to inject arbitrary web script or HTML via crafted input in a PHP script, demonstrated through Wizard/Edit/Modules/Image...

CVE-2011-4766

The CVE-2011-4766 entry concerns Parallels Plesk Small Business Panel 10.2.0, specifically the Site Editor/SiteBuilder and the file wysiwyg/fckconfig.js. The claim is that remote attackers could obtain ASP source code via direct access to that file; however, multiple sources note this is disputed...

CVE-2011-4767

The CVE-2011-4767 issue affects Parallels Plesk Small Business Panel 10.2.0, specifically the Site Editor (SiteBuilder) feature. It describes web pages containing e-mail addresses not intended for deployment-related correspondence, enabling remote attackers to obtain potentially sensitive informa...

CVE-2011-4768

Parallels Plesk Small Business Panel 10.2.0 Site Editor (SiteBuilder) omits the Content-Type header charset parameter for certain resources, which might allow remote attackers to cause an unspecified impact via a interpretation conflict involving Wizard/Edit/Modules/Image and related files. The a...

PT-2011-5096 · Parallels · Parallels Plesk Small Business Panel

Name of the Vulnerable Software and Affected Versions: Parallels Plesk Small Business Panel version 10.2.0 Description: The Site Editor feature in Parallels Plesk Small Business Panel allows remote attackers to obtain ASP source code via a direct request to "wysiwyg/fckconfig.js". Note that the...

PT-2011-5085

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue arises from improper validation of string data intended for storage in an XML document. This can be exploited by remote attackers through crafted cookies, potentially...

PT-2011-5086

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue allows remote attackers to obtain potentially sensitive information via script access to cookies. This is because the HTTPOnly flag is not included in a Set-Cookie heade...

PT-2011-5083

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands by providing crafted input to a PHP script. This is demonstrated by...

PT-2011-5087

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue allows remote attackers to bypass authentication by leveraging an unattended workstation. This is because the password form field is generated without disabling the...

PT-2011-5088

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue allows remote attackers to obtain sensitive information by sniffing the network, as it receives cleartext password input over HTTP. This is demonstrated by forms in...

PT-2011-5084

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script. This is demonstrated by API endpoints such as...

PT-2011-5091

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue is related to the omission of the Content-Type header's charset parameter for certain resources, which could allow remote attackers to have an unspecified impact. This...

PT-2011-5090

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue allows remote attackers to obtain potentially sensitive information by reading certain web pages, such as "smb/email-address/list" and other files, which contain e-mail...

PT-2011-5093

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue concerns SQL injection vulnerabilities in the Site Editor feature of Parallels Plesk Small Business Panel. These vulnerabilities allow remote attackers to execute...

PT-2011-5094

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Site Editor feature of Parallels Plesk Small Business Panel. These vulnerabilities allow remote attacke...

PT-2011-5095

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue concerns the Site Editor feature in Parallels Plesk Small Business Panel, where the HTTPOnly flag is not included in a Set-Cookie header for a cookie. This omission make...

PT-2011-5098

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue is related to the Site Editor feature in Parallels Plesk Small Business Panel, where the Content-Type header's charset parameter is omitted for certain resources. This...