CVE Feed

    Dashboard / CVE / CVE-2011-4758

    CVE-2011-4758

    Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and certain other files.

    Published:Dec 16, 2011
    Last Modified:Apr 11, 2025
    EPS:Dec 16, 2011
    EPSS Score:0.0025
    CVSS Score:5

    Affected Products

    Vendor
    Parallels
    Product
    Parallels Plesk Small Business Panel

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2011-4756 (CVSS 5) — Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a co…
    CVE-2011-4761 (CVSS 10) — Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain reso…
    CVE-2011-4762 (CVSS 10) — Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which …
    CVE-2011-4763 (CVSS 7.5) — Multiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small B…
    CVE-2011-4764 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels …
    CVE-2011-4766 (CVSS 5) — The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allows remote attacke…
    CVE-2011-4767 (CVSS 5) — The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web pages contain…
    CVE-2011-4754 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remot…
    CVE-2011-4757 (CVSS 10) — Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete…
    CVE-2011-4760 (CVSS 5) — Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended fo…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High