Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

parallels parallels plesk panel 10.3.1 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2012-1557

SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x prior to 8.6 MU#2, 9.x prior to 9.5 MU#11, 10.0.x before MU#13, 10.1.x before MU#22, 10.2.x before MU#16, and 10.3.x before MU#5 allows remote malicious users to execute arbitrary SQL...
Parallels Parallels Plesk Panel 8.2Parallels Parallels Plesk Panel 8.0Parallels Parallels Plesk Panel 8.6Parallels Parallels Plesk Panel 7.6.1Parallels Parallels Plesk Panel 8.1Parallels Parallels Plesk Panel 8.4Parallels Parallels Plesk Panel 8.3Parallels Parallels Plesk Panel 7.0Parallels Parallels Plesk Panel 9.3Parallels Parallels Plesk Panel 9.5.4Parallels Parallels Plesk Panel 9.0Parallels Parallels Plesk Panel 9.5Parallels Parallels Plesk Panel 9.2Parallels Parallels Plesk Panel 10.0.1Parallels Parallels Plesk Panel 10.1.1Parallels Parallels Plesk Panel 10.2.0Parallels Parallels Plesk Panel 10.3.1
NA

CVE-2011-4746

The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not disable the SSL 2.0 protocol, which makes it easier for remote malicious users to conduct spoofing attacks by leveraging protocol weaknesses.
Parallels Parallels Plesk Panel 10.3.1 Build1013110726.09
NA

CVE-2011-4749

The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 generates a password form field without disabling the autocomplete feature, which makes it easier for remote malicious users to bypass authentication by leveraging an unattended workstation, as demonstrated by...
Parallels Parallels Plesk Panel 10.3.1 Build1013110726.09
NA

CVE-2011-4745

Multiple cross-site scripting (XSS) vulnerabilities in the billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 allow remote malicious users to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/index.php/default and cert...
Parallels Parallels Plesk Panel 10.3.1 Build1013110726.09
NA

CVE-2011-4747

The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not prevent the use of weak ciphers for SSL sessions, which makes it easier for remote malicious users to defeat cryptographic protection mechanisms via a crafted CipherSuite list.
Parallels Parallels Plesk Panel 10.3.1 Build1013110726.09
NA

CVE-2011-4748

The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote malicious users to obtain potentially sensitive information by rea...
Parallels Parallels Plesk Panel 10.3.1 Build1013110726.09
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23692malicious code‎XML injectionCVE-2024-28020CVE-2024-35252CVE-2024-5833CVE-2024-30066injectionCVE-2024-23282
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook