Lucene search

K
ParallelsParallels Plesk Panel10.2.0 build1011110331.18

9 matches found

CVE
CVE
added 2011/12/16 11:55 a.m.35 views

CVE-2011-4727

The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service (parsing error) or possibly have unspecified other impact via a craft...

10CVSS7.7AI score0.01863EPSS
CVE
CVE
added 2011/12/16 11:55 a.m.35 views

CVE-2011-4733

The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/admin-home/disable-featured-applicat...

10CVSS6.9AI score0.01751EPSS
CVE
CVE
added 2011/12/16 11:55 a.m.34 views

CVE-2011-4732

The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving account/power-mode-logout a...

10CVSS6.9AI score0.01751EPSS
CVE
CVE
added 2011/12/16 11:55 a.m.33 views

CVE-2011-4726

Multiple cross-site scripting (XSS) vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/health/ and certain other files.

4.3CVSS5.9AI score0.00225EPSS
CVE
CVE
added 2011/12/16 11:55 a.m.33 views

CVE-2011-4728

The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies use...

5CVSS6.7AI score0.0025EPSS
CVE
CVE
added 2011/12/16 11:55 a.m.33 views

CVE-2011-4730

The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in adm...

10CVSS7.3AI score0.01058EPSS
CVE
CVE
added 2011/12/16 11:55 a.m.33 views

CVE-2011-4731

The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 includes an RFC 1918 IP address within a web page, which allows remote attackers to obtain potentially sensitive information by reading this page, as demonstrated by admin/home/admin and certain other files.

5CVSS6.4AI score0.0023EPSS
CVE
CVE
added 2011/12/16 11:55 a.m.31 views

CVE-2011-4725

Multiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by login_up.php3 and certain other files.

7.5CVSS8.8AI score0.00314EPSS
CVE
CVE
added 2011/12/16 11:55 a.m.30 views

CVE-2011-4729

The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cook...

5CVSS6.3AI score0.0025EPSS