CVE-2011-4755

Published: Dec 16, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Parallels Plesk Small Business Panel 10.2.0 does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service (parsing error) or possibly have unspecified other impact via a crafted cookie, as demonstrated by cookies to client@1/domain@1/hosting/file-manager/ and certain other files.

Affected (1)

Products: Parallels: Parallels Plesk Small Business Panel

1 product

Parallels Plesk Small Business Panel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Parallels Parallels Plesk Small Business Panel	Version 10.2.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://xss.cx/examples/plesk-reports/plesk-10.2.0.html

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/72207

Source: cve@mitre.org

http://xss.cx/examples/plesk-reports/plesk-10.2.0.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/72207

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.