Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4701 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-16T20:41:40.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CallConfirm (jp.gr.java_conf.ofnhwx.callconfirm) application 2.0.0 for Android does not properly protect data, which allows remote attackers to read or modify allow/block lists via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4701-vulnerability-in-CallConfirm.html
CVE ID: CVE-2011-4702 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-17T03:18:38.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nimbuzz (com.nimbuzz) application 2.0.8 and 2.0.10 for Android does not properly protect data, which allows remote attackers to read or modify a contact list via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4702-vulnerability-in-Nimbuzz.html
CVE ID: CVE-2011-4703 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-16T18:18:47.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Limit My Call (com.limited.call.view) application 2.11 for Android does not properly protect data, which allows remote attackers to read or modify call logs and a contact list via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4703-vulnerability-in-LimitMyCall.html
CVE ID: CVE-2011-4704 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-17T00:42:25.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Voxofon (com.voxofon) application before 2.5.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4704-vulnerability-in-Voxofon.html
CVE ID: CVE-2011-4705 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-16T20:32:29.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ming Blacklist Free (vc.software.blacklist) application 1.8.1 and 1.9.2.1 for Android does not properly protect data, which allows remote attackers to read or modify blacklists and a contact list via a crafted application that launches a "data-flow attack." Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4705-vulnerability-in-Blacklist.html
CVE ID: CVE-2011-4707 State: PUBLISHED Published: 2011-12-08T19:00:00 Last Updated: 2024-08-07T00:16:34.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver allow remote attackers to inject arbitrary web script or HTML via the (1) instname parameter to the VsiTestScan servlet and (2) name parameter to the VsiTestServlet servlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520554/100/0/threaded - http://dsecrg.com/pages/vul/show.php?id=336 - http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb66
.com/pages/vul/show.php?id=336 - http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a - https://erpscan.io/advisories/dsecrg-11-036-sap-netwaver-virus-scan-interface-multiple-xss/ - https://service.sap.com/sap/support/notes/1546307
CVE ID: CVE-2011-4708 State: PUBLISHED Published: 2011-12-08T19:00:00Z Last Updated: 2024-09-16T18:39:42.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Asset Manager before 7.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM38467 - http://www.securitytracker.com/id?1026285
CVE ID: CVE-2011-4709 State: PUBLISHED Published: 2011-12-08T19:00:00 Last Updated: 2024-08-07T00:16:34.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Hotaru.php in the Search plugin 1.3 for Hotaru CMS allow remote attackers to inject arbitrary web script or HTML via the (1) SITE_NAME parameter to admin_index.php, or the (2) return and (3) search parameters to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71302 - http://www.osvdb.org/77095 - http://secunia.com/advisorie
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71302 - http://www.osvdb.org/77095 - http://secunia.com/advisories/46842 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5057.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/71301 - http://www.zeroscience.mk/codes/hotarucms_xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/71300
CVE ID: CVE-2011-4710 State: PUBLISHED Published: 2011-12-08T19:00:00Z Last Updated: 2024-09-16T16:28:27.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Pixie CMS 1.01 through 1.04 allow remote attackers to execute arbitrary SQL commands via the (1) pixie_user parameter and (2) Referer HTTP header in a request to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18115
CVE ID: CVE-2011-4711 State: PUBLISHED Published: 2011-12-08T19:00:00 Last Updated: 2024-08-07T00:16:34.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) lang or (2) result parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.namazu.org/security.html# - https://exchange.xforce.ibmcloud.com/vulnerabilities/71489
CVE ID: CVE-2011-4712 State: PUBLISHED Published: 2011-12-08T19:00:00 Last Updated: 2024-08-07T00:16:34.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50845 - http://www.securityfocus.com/archive/1/520679/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/71512
CVE ID: CVE-2011-4713 State: PUBLISHED Published: 2011-12-08T19:00:00Z Last Updated: 2024-09-17T00:10:45.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the _ID parameter to (1) catalog/shopping_cart.php or (2) catalog/content.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2011/Nov/117 - http://secunia.com/advisories/46741 - http://oscss.svn.sourceforge.net/viewvc/oscss?view=revision&revision=3872 - http://www.rul3z.de/advisories/SSCHADV2011-034.txt - http://www.expl
orge.net/viewvc/oscss?view=revision&revision=3872 - http://www.rul3z.de/advisories/SSCHADV2011-034.txt - http://www.exploit-db.com/exploits/18099 - http://www.securityfocus.com/archive/1/520421 - http://forums.oscss.org/2-security/oscss2-id-parameter-local-file-inclusion-t1999.html#p11194
CVE ID: CVE-2011-4714 State: PUBLISHED Published: 2011-12-08T19:00:00 Last Updated: 2024-08-07T00:16:34.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Virtual Vertex Muster before 6.20 allows remote attackers to read arbitrary files via a \.. (backslash dot dot) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46991 - http://www.securityfocus.com/bid/50841 - http://www.security-assessment.com/files/documents/advisory/Muster-Arbitrary_File_Download.pdf - http://www.exploit-db.com/exploits/18185 - http://osvdb.org/77375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71513
CVE ID: CVE-2011-4715 State: PUBLISHED Published: 2011-12-08T19:00:00 Last Updated: 2024-08-07T00:16:34.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the KohaOpacLanguage cookie to cgi-bin/opac/opac-main.pl, related to Output.pm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50812 - http://koha-community.org/koha-3-6-1/#more-2929 - http://www.vigasis.com/en/?guncel_guvenlik=LibLime%20Koha%20%3C=%204.2%20Local%20Fil
mmunity.org/koha-3-6-1/#more-2929 - http://www.vigasis.com/en/?guncel_guvenlik=LibLime%20Koha%20%3C=%204.2%20Local%20File%20Inclusion%20Vulnerability&lnk=exploits/18153 - http://www.exploit-db.com/exploits/18153 - http://koha-community.org/koha-3-4-7/#more-2971 - http://osvdb.org/77322 - http://secunia.com/advisories/46980 - https://github.com/liblime/LibLime-Koha/commit/8ea6f7bc37d05a9ec25b5afbea011cf9de5f1e49#C4/Output.pm - https://exchange.xforce.ibmcloud.com/vulnerabilities/71478
CVE ID: CVE-2011-4716 State: PUBLISHED Published: 2011-12-08T19:00:00 Last Updated: 2024-08-07T00:16:34.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18079 - http://www.securityfocus.com/bid/50520
CVE ID: CVE-2011-4717 State: PUBLISHED Published: 2011-12-20T11:00:00Z Last Updated: 2024-09-17T02:10:58.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users to delete arbitrary directories via a crafted RMD (aka rmdir) command. Additional Analyst Notes: - CVE Program Container: References: - http://forum.zftpserver.com/viewtopic.php?f=4&t=2927 - http://www.infoserve.de/system/files/advisories/INFOSERVE-ADV2011-09.txt
CVE ID: CVE-2011-4718 State: PUBLISHED Published: 2013-08-13T01:00:00Z Last Updated: 2024-09-16T18:44:19.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID. Additional Analyst Notes: - CVE Program Container: References: - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=25e8fcc88fa20dc9d4c47184471003f436927cde - https://wiki.php.net/rfc/strict_sessions - https://bugs.php.net/bug.php?id=60491 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=169b78eb79b0e080b67f9798708eb3771c6d0b2f
CVE ID: CVE-2011-4719 State: PUBLISHED Published: 2011-12-09T20:00:00Z Last Updated: 2024-09-16T19:51:12.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.63 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/12/beta-channel-update-for-chromebooks.html
CVE ID: CVE-2011-4720 State: PUBLISHED Published: 2014-12-28T00:00:00 Last Updated: 2024-08-07T00:16:34.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service (daemon crash) via a long filename in a (1) RRQ or (2) WRQ operation. Additional Analyst Notes: - CVE Program Container: References: - http://secpod.org/blog/?p=419
CVE ID: CVE-2011-4722 State: PUBLISHED Published: 2014-12-28T02:00:00 Last Updated: 2024-08-07T00:16:34.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. (dot dot) in the Filename field of an RRQ operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/77455 - http://secpod.org/blog/?p=424 - http://secunia.com/advisories/47025 - https://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05054714 - http://securitytracker.com/id?1026368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71
docId=emr_na-c05054714 - http://securitytracker.com/id?1026368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71610 - http://www.exploit-db.com/exploits/18189/
CVE ID: CVE-2011-4723 State: PUBLISHED Published: 2011-12-20T11:00:00.000Z Last Updated: 2025-10-22T00:05:48.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://en.securitylab.ru/lab/PT-2011-30
CVE ID: CVE-2011-4725 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by login_up.php3 and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-10.2.0-build-1011110331.18-xss-sqli-cwe79-cwe89-javascript-injection-exception-example-poc-report-paros-burp-suite-pro-1.4.1.html - ht
011110331.18-xss-sqli-cwe79-cwe89-javascript-injection-exception-example-poc-report-paros-burp-suite-pro-1.4.1.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72334
CVE ID: CVE-2011-4726 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/health/ and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72333 - http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-10.2.0-build-1011110331.18-xss-sqli-cwe79-cwe89-javascr
2333 - http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-10.2.0-build-1011110331.18-xss-sqli-cwe79-cwe89-javascript-injection-exception-example-poc-report-paros-burp-suite-pro-1.4.1.html
CVE ID: CVE-2011-4727 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service (parsing error) or possibly have unspecified other impact via a crafted REST URL parameter, as demonstrated by parameters to admin/ and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72332 - http://xss.cx/examp
- CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72332 - http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-10.2.0-build-1011110331.18-xss-sqli-cwe79-cwe89-javascript-injection-exception-example-poc-report-paros-burp-suite-pro-1.4.1.html
CVE ID: CVE-2011-4728 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies used by login_up.php3 and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72331 - http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-10.2.
s://exchange.xforce.ibmcloud.com/vulnerabilities/72331 - http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-10.2.0-build-1011110331.18-xss-sqli-cwe79-cwe89-javascript-injection-exception-example-poc-report-paros-burp-suite-pro-1.4.1.html
CVE ID: CVE-2011-4729 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by login_up.php3 and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-10.2.0-build-1011110331.18-xss-sqli-cwe79-cwe89-javascript-
- http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-10.2.0-build-1011110331.18-xss-sqli-cwe79-cwe89-javascript-injection-exception-example-poc-report-paros-burp-suite-pro-1.4.1.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72330
CVE ID: CVE-2011-4730 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in admin/reseller/login-info/ and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72329 - http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-
https://exchange.xforce.ibmcloud.com/vulnerabilities/72329 - http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-10.2.0-build-1011110331.18-xss-sqli-cwe79-cwe89-javascript-injection-exception-example-poc-report-paros-burp-suite-pro-1.4.1.html
CVE ID: CVE-2011-4731 State: PUBLISHED Published: 2011-12-16T11:00:00Z Last Updated: 2024-09-16T19:10:21.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 includes an RFC 1918 IP address within a web page, which allows remote attackers to obtain potentially sensitive information by reading this page, as demonstrated by admin/home/admin and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-10.2.0-build-1011110331.18-xss-sqli-cwe79-cwe89-javascript-injection-exception-example-poc-report-paros-burp-suite-pr
sa-10.2.0-build-1011110331.18-xss-sqli-cwe79-cwe89-javascript-injection-exception-example-poc-report-paros-burp-suite-pro-1.4.1.html
CVE ID: CVE-2011-4732 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving account/power-mode-logout and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-redha
issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-10.2.0-build-1011110331.18-xss-sqli-cwe79-cwe89-javascript-injection-exception-example-poc-report-paros-burp-suite-pro-1.4.1.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72327
CVE ID: CVE-2011-4733 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/admin-home/disable-featured-applications-promo and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com
ted by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72326 - http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-10.2.0-build-1011110331.18-xss-sqli-cwe79-cwe89-javascript-injection-exception-example-poc-report-paros-burp-suite-pro-1.4.1.html
CVE ID: CVE-2011-4734 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by file-manager/ and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72325
CVE ID: CVE-2011-4735 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by smb/user/create and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/541814 - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html - http
k-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72324
CVE ID: CVE-2011-4736 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in login_up.php3 and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72323 - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.htm
les/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html