CVE Feed

    Dashboard / CVE / CVE-2011-4753

    CVE-2011-4753

    Multiple SQL injection vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by domains/sitebuilder_edit.php and certain other files.

    Published:Dec 16, 2011
    Last Modified:Apr 11, 2025
    EPS:Dec 16, 2011
    EPSS Score:0.00314
    CVSS Score:7.5

    Affected Products

    Vendor
    Parallels
    Product
    Parallels Plesk Small Business Panel

    Exploits

    No exploit reference

    Related CVEs

    CVE-2011-4756 (CVSS 5) — Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a co…
    CVE-2011-4758 (CVSS 5) — Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote a…
    CVE-2011-4761 (CVSS 10) — Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain reso…
    CVE-2011-4762 (CVSS 10) — Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which …
    CVE-2011-4763 (CVSS 7.5) — Multiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small B…
    CVE-2011-4764 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels …
    CVE-2011-4766 (CVSS 5) — The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allows remote attacke…
    CVE-2011-4767 (CVSS 5) — The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web pages contain…
    CVE-2011-4754 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remot…
    CVE-2011-4757 (CVSS 10) — Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High