Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
plesk vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2019-18793
Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter.
Parallels Parallels Plesk Panel 9.5
3.3
CVSSv3
CVE-2018-5693
The LinuxMagic MagicSpam extension prior to 2.0.14-1 for Plesk allows local users to discover mailbox names by reading /var/log/magicspam/mslog.
Linuxmagic Magicspam
NA
CVE-2013-4878
The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote malicious users to execute arbitrary code via a crafted request, a different vuln...
Parallels Parallels Plesk Panel 9.2
Parallels Parallels Plesk Panel 9.0
Parallels Parallels Small Business Panel 10.0
1 EDB exploit
NA
CVE-2013-0132
The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote malicious users to execute arbitrary PHP code via a request containing crafted environment variables.
Parallels Parallels Plesk Panel 11.0.9
NA
CVE-2013-0133
Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allows local users to gain privileges via a crafted PATH environment variable.
Parallels Parallels Plesk Panel 11.0.9
NA
CVE-2012-1823
sapi/cgi/cgi_main.c in PHP prior to 5.3.12 and 5.4.x prior to 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote malicious users to execute arbitrary code by placing command-line...
Php Php
Php Php 5.3.10
Php Php 5.3.3
Php Php 5.3.2
Php Php 5.3.1
Php Php 5.2.12
Php Php 5.2.13
Php Php 5.2.4
Php Php 5.2.7
Php Php 5.1.6
Php Php 5.1.4
Php Php 5.0.0
Php Php 5.3.5
Php Php 5.3.4
Php Php 5.3.9
Php Php 5.3.8
Php Php 5.3.0
Php Php 5.2.5
Php Php 5.2.0
Php Php 5.2.3
Php Php 5.2.15
Php Php 5.2.16
4 EDB exploits
2 Nmap scripts
17 Github repositories
1 Article
NA
CVE-2012-1557
SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x prior to 8.6 MU#2, 9.x prior to 9.5 MU#11, 10.0.x before MU#13, 10.1.x before MU#22, 10.2.x before MU#16, and 10.3.x before MU#5 allows remote malicious users to execute arbitrary SQL...
Parallels Parallels Plesk Panel 7.0
Parallels Parallels Plesk Panel 8.6
Parallels Parallels Plesk Panel 7.6.1
Parallels Parallels Plesk Panel 8.0
Parallels Parallels Plesk Panel 8.3
Parallels Parallels Plesk Panel 8.4
Parallels Parallels Plesk Panel 8.1
Parallels Parallels Plesk Panel 8.2
Parallels Parallels Plesk Panel 9.0
Parallels Parallels Plesk Panel 9.2
Parallels Parallels Plesk Panel 9.5.4
Parallels Parallels Plesk Panel 9.3
Parallels Parallels Plesk Panel 9.5
Parallels Parallels Plesk Panel 10.0.1
Parallels Parallels Plesk Panel 10.1.1
Parallels Parallels Plesk Panel 10.2.0
Parallels Parallels Plesk Panel 10.3.1
NA
CVE-2011-4849
The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote malicious users to capture this cookie by intercepting its transmission within an http session, as demonstrated by co...
Parallels Parallels Plesk Panel 10.4.4 Build20111103.18
NA
CVE-2011-4760
Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote malicious users to obtain potentially sensitive information by reading a page, as demonstrate...
Parallels Parallels Plesk Small Business Panel 10.2.0
NA
CVE-2011-4725
Multiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote malicious users to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by login_up.php3 and certain other files.
Parallels Parallels Plesk Panel 10.2.0 Build1011110331.18
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
HTML injection
CVE-2024-35894
SQL
CVE-2024-5105
CVE-2014-100005
CVE-2024-35895
unauthorized
CVE-2024-22120
CVE-2024-35890
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »