CVE-2011-4758

Published: Dec 16, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and certain other files.

Affected (1)

Products: Parallels: Parallels Plesk Small Business Panel

Parallels

1 product

Parallels Plesk Small Business Panel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Parallels Parallels Plesk Small Business Panel	Version 10.2.0

Related CWEs

CWE-310

References (4)

http://xss.cx/examples/plesk-reports/plesk-10.2.0.html

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/72210

Source: cve@mitre.org

http://xss.cx/examples/plesk-reports/plesk-10.2.0.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/72210

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.