CVE Feed

    Dashboard / CVE / CVE-2011-4764

    CVE-2011-4764

    Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Wizard/Edit/Modules/Image and certain other files.

    Published:Dec 16, 2011
    Last Modified:Apr 11, 2025
    EPS:Dec 16, 2011
    EPSS Score:0.00225
    CVSS Score:4.3

    Affected Products

    Vendor
    Parallels
    Product
    Parallels Plesk Small Business Panel

    Exploits

    No exploit reference

    Related CVEs

    CVE-2011-4756 (CVSS 5) — Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a co…
    CVE-2011-4758 (CVSS 5) — Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote a…
    CVE-2011-4761 (CVSS 10) — Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain reso…
    CVE-2011-4762 (CVSS 10) — Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which …
    CVE-2011-4763 (CVSS 7.5) — Multiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small B…
    CVE-2011-4766 (CVSS 5) — The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allows remote attacke…
    CVE-2011-4767 (CVSS 5) — The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web pages contain…
    CVE-2011-4754 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remot…
    CVE-2011-4757 (CVSS 10) — Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete…
    CVE-2011-4760 (CVSS 5) — Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended fo…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High