CVE Feed

    Dashboard / CVE / CVE-2019-18793

    CVE-2019-18793

    Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter.

    Published:Nov 13, 2019
    Last Modified:Nov 21, 2024
    EPS:Nov 13, 2019
    EPSS Score:0.00328
    CVSS Score:6.1

    Affected Products

    Vendor
    Parallels
    Product
    Parallels Plesk Panel

    Exploits

    http://packetstormsecurity.com/files/155175/Parallels-Plesk-Panel-9.5-Cross-Site-Scripting.htmlhttp://packetstormsecurity.com/files/155175/Parallels-Plesk-Panel-9.5-Cross-Site-Scripting.html

    Related CVEs

    CVE-2013-4878 (CVSS 7.5) — The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on U…
    CVE-2013-0132 (CVSS 6.8) — The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows…
    CVE-2013-0133 (CVSS 7.2) — Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allow…
    CVE-2012-1557 (CVSS 7.5) — SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU…
    CVE-2011-4738 (CVSS 5) — The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 does not include the HTTPOnly flag in a Se…
    CVE-2011-4735 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build…
    CVE-2011-4731 (CVSS 5) — The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 includes an RFC 1918 IP add…
    CVE-2011-4745 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in the billing system for Parallels Plesk Panel 10.3.1_bui…
    CVE-2011-4742 (CVSS 5) — The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 has web pages containing e-mail addresses …
    CVE-2011-4733 (CVSS 10) — The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 sends incorrect Content-Typ…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High