CVE-2011-4746

Published: Dec 16, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not disable the SSL 2.0 protocol, which makes it easier for remote attackers to conduct spoofing attacks by leveraging protocol weaknesses.

Affected (1)

Products: Parallels: Parallels Plesk Panel

Parallels

1 product

Parallels Plesk Panel

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Parallels Parallels Plesk Panel	Version 10.3.1_build1013110726.09

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 6.0

Related CWEs

CWE-310

References (2)

http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html

Source: cve@mitre.org

http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.