Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4737 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a submitted password within an HTTP response body, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by password handling in client@2/domain@1/odbc/dsn@1/properties/. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html - https://exchange.xforce.ibm
-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72322
CVE ID: CVE-2011-4738 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by get_password.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110
s.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72321
CVE ID: CVE-2011-4739 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in smb/my-profile and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72320 - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86
mcloud.com/vulnerabilities/72320 - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html
CVE ID: CVE-2011-4740 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates web pages containing external links in response to GET requests with query strings for smb/app/search-data/catalogId/marketplace and certain other files, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/xs
leakage" issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72319
CVE ID: CVE-2011-4741 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a database connection string within a web page, which allows remote attackers to obtain potentially sensitive information by reading this page, as demonstrated by client@2/domain@1/hosting/aspdotnet/. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html - https://exchange.xforce.ibmcloud.com/vulnerabi
ng-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72318
CVE ID: CVE-2011-4742 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a page, as demonstrated by smb/user/list and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-2
//xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72317
CVE ID: CVE-2011-4743 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/user/create and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-c
Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72316
CVE ID: CVE-2011-4744 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/admin-home/featured-applications/ and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-sc
l Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/xss-reflected-cross-site-scripting-cwe79-capec86-plesk-parallels-control-panel-version-20110407.20.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72315
CVE ID: CVE-2011-4745 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/index.php/default and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72264 - http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-b
64 - http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html
CVE ID: CVE-2011-4746 State: PUBLISHED Published: 2011-12-16T11:00:00Z Last Updated: 2024-09-16T20:31:28.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not disable the SSL 2.0 protocol, which makes it easier for remote attackers to conduct spoofing attacks by leveraging protocol weaknesses. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html
CVE ID: CVE-2011-4747 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not prevent the use of weak ciphers for SSL sessions, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a crafted CipherSuite list. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html - https://exchange.xforce.ibmcloud.
9%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72262
CVE ID: CVE-2011-4748 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a page, as demonstrated by js/ajax/core/ajax.inc.js and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.e
ences: - http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72261
CVE ID: CVE-2011-4749 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms on certain pages under admin/index.php/default. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-ja
ples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72260
CVE ID: CVE-2011-4750 State: PUBLISHED Published: 2011-12-16T11:00:00Z Last Updated: 2024-09-16T18:43:43.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Default.aspx and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html
CVE ID: CVE-2011-4751 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGettingStarted.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72203 - http://xss.cx/examples/exploits/stored-reflected-xss-c
s: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72203 - http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html
CVE ID: CVE-2011-4752 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving frmCustomReport.aspx and certain other files. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html - https://exchange.xforc
eferences: - http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72204
CVE ID: CVE-2011-4753 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by domains/sitebuilder_edit.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-10.2.0.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72205
CVE ID: CVE-2011-4754 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by smb/app/available/id/apscatalog/ and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-10.2.0.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72206
CVE ID: CVE-2011-4755 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Parallels Plesk Small Business Panel 10.2.0 does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service (parsing error) or possibly have unspecified other impact via a crafted cookie, as demonstrated by cookies to client@1/domain@1/hosting/file-manager/ and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-10.2.0.html - https://exchange.xforce.ibmcloud.com/vulnera
ner: References: - http://xss.cx/examples/plesk-reports/plesk-10.2.0.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72207
CVE ID: CVE-2011-4756 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by domains/sitebuilder_edit.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72208 - http://xss.cx/examples/plesk-reports/plesk-10.2.0.html
CVE ID: CVE-2011-4757 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in smb/auth and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72209 - http://xss.cx/examples/plesk-reports/plesk-10.2.0.html
CVE ID: CVE-2011-4758 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72210 - http://xss.cx/examples/plesk-reports/plesk-10.2.0.html
CVE ID: CVE-2011-4759 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Parallels Plesk Small Business Panel 10.2.0 generates web pages containing external links in response to GET requests with query strings for client@1/domain@1/hosting/file-manager/ and certain other files, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-10.2.0.html - https://
Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-10.2.0.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72211
CVE ID: CVE-2011-4760 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a page, as demonstrated by smb/email-address/list and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72212 - http://xss.cx/examples/plesk-reports/plesk-10.2.0.html
CVE ID: CVE-2011-4761 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving domains/sitebuilder_edit.php and certain other files. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72213 - http://xss.cx/ex
es: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72213 - http://xss.cx/examples/plesk-reports/plesk-10.2.0.html
CVE ID: CVE-2011-4762 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/app/top-categories-data/ and certain other files. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72214 - http://xss.cx/examples/plesk-
gram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72214 - http://xss.cx/examples/plesk-reports/plesk-10.2.0.html
CVE ID: CVE-2011-4763 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by Wizard/Edit/Html and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72215 - http://xss.cx/examples/plesk-reports/plesk-10.2.0-site-editor.html
CVE ID: CVE-2011-4764 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Wizard/Edit/Modules/Image and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72216 - http://xss.cx/examples/plesk-reports/plesk-10.2.0-site-editor.html
CVE ID: CVE-2011-4765 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by Wizard/Edit/Modules/ImageGallery/MultiImagesUpload and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72217 - http://xss.cx
Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72217 - http://xss.cx/examples/plesk-reports/plesk-10.2.0-site-editor.html
CVE ID: CVE-2011-4766 State: PUBLISHED Published: 2011-12-16T11:00:00Z Last Updated: 2024-09-16T18:29:44.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allows remote attackers to obtain ASP source code via a direct request to wysiwyg/fckconfig.js. NOTE: CVE disputes this issue because ASP is only used in a JavaScript comment Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-10.2.0-site-editor.html
CVE ID: CVE-2011-4767 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a page, as demonstrated by js/Wizard/Status.js and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-10.2.0-site-editor.html - https://exchange.xforce.ibmcl