CVE Feed

    Dashboard / CVE / CVE-2011-4768

    CVE-2011-4768

    The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving Wizard/Edit/Modules/Image and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.

    Published:Dec 16, 2011
    Last Modified:Apr 11, 2025
    EPS:Dec 16, 2011
    EPSS Score:0.01751
    CVSS Score:10

    Affected Products

    Vendor
    Parallels
    Product
    Parallels Plesk Small Business Panel

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2011-4756 (CVSS 5) — Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a co…
    CVE-2011-4758 (CVSS 5) — Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote a…
    CVE-2011-4761 (CVSS 10) — Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain reso…
    CVE-2011-4762 (CVSS 10) — Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which …
    CVE-2011-4763 (CVSS 7.5) — Multiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small B…
    CVE-2011-4764 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels …
    CVE-2011-4766 (CVSS 5) — The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allows remote attacke…
    CVE-2011-4767 (CVSS 5) — The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web pages contain…
    CVE-2011-4754 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remot…
    CVE-2011-4757 (CVSS 10) — Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High