Parallels Plesk Small Business Panel
Approved changes feed: RSS · Atom
cpe:2.3:a:parallels:parallels_plesk_small_business_panel:10.2.0:*:*:*:*:*:*:*
part: a version: 10.2.0 update: *
| Vendor | Parallels (f7bc486c-fad7-5571-9bc2-c91e15af2082) |
|---|---|
| Product | Parallels Plesk Small Business Panel (4f95a84b-71cd-54db-a1ae-2a6e31c2e140) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-4768 |
vulnerable | 2026-06-08 04:59:32.923270 |
Details available
The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving Wizard/Edit/Modules/Image and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.
Published: 2011-12-16T11:00:00.000Z
Updated: 2024-09-17T00:26:53.324Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4767 |
vulnerable | 2026-06-08 04:59:32.923037 |
Details available
The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a page, as demonstrated by js/Wizard/Status.js and certain other files.
Published: 2011-12-16T11:00:00.000Z
Updated: 2024-08-07T00:16:34.839Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4766 |
vulnerable | 2026-06-08 04:59:32.922790 |
Details available
The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allows remote attackers to obtain ASP source code via a direct request to wysiwyg/fckconfig.js. NOTE: CVE disputes this issue because ASP is only used in a JavaScript comment
Published: 2011-12-16T11:00:00.000Z
Updated: 2024-09-16T18:29:44.242Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4765 |
vulnerable | 2026-06-08 04:59:32.922553 |
Details available
The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by Wizard/Edit/Modules/ImageGallery/MultiImagesUpload and certain other files.
Published: 2011-12-16T11:00:00.000Z
Updated: 2024-08-07T00:16:34.879Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4764 |
vulnerable | 2026-06-08 04:59:32.922305 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Wizard/Edit/Modules/Image and certain other files.
Published: 2011-12-16T11:00:00.000Z
Updated: 2024-08-07T00:16:34.660Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4763 |
vulnerable | 2026-06-08 04:59:32.922041 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4762 |
vulnerable | 2026-06-08 04:59:32.921795 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4761 |
vulnerable | 2026-06-08 04:59:32.921546 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4760 |
vulnerable | 2026-06-08 04:59:32.921292 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4759 |
vulnerable | 2026-06-08 04:59:32.921025 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4758 |
vulnerable | 2026-06-08 04:59:32.920773 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4757 |
vulnerable | 2026-06-08 04:59:32.920514 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4756 |
vulnerable | 2026-06-08 04:59:32.920259 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4755 |
vulnerable | 2026-06-08 04:59:32.919985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4754 |
vulnerable | 2026-06-08 04:59:32.919702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4753 |
vulnerable | 2026-06-08 04:59:32.919319 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.