PP
Product
Parallels Plesk Panel
42
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Parallels Plesk Panel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-18793 | 6.1 | Nov 13 | Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter Affected: 9.5 |
| CVE-2013-4878 | – | Jul 18 | The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes… Affected: 9.0; 9.2 |
| CVE-2013-0133 | – | Apr 18 | Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allows local users to gain privileges via a crafted PATH environment… Affected: 11.0.9 |
| CVE-2013-0132 | – | Apr 18 | The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a… Affected: 11.0.9 |
| CVE-2012-1557 | – | Mar 12 | SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU#2, 9.x before 9.5 MU#11, 10.0.x before MU#13, 10.1.x before MU#22,… Affected: 7.0; 7.6.1; 8.0; 8.1; 8.2; 8.3; +34 more |
| CVE-2011-4856 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an… Affected: 10.4.4_build20111103.18 |
| CVE-2011-4855 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to… Affected: 10.4.4_build20111103.18 |
| CVE-2011-4854 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type data in HTML META elements,… Affected: 10.4.4_build20111103.18 |
| CVE-2011-4853 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 includes an RFC 1918 IP address within a web page, which allows remote attackers to obtain potentially sensitive… Affected: 10.4.4_build20111103.18 |
| CVE-2011-4852 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 generates web pages containing external links in response to GET requests with query strings for… Affected: 10.4.4_build20111103.18 |
| CVE-2011-4851 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 generates a password form field without disabling the autocomplete feature, which makes it easier for remote… Affected: 10.4.4_build20111103.18 |
| CVE-2011-4850 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote… Affected: 10.4.4_build20111103.18 |
| CVE-2011-4849 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to… Affected: 10.4.4_build20111103.18 |
| CVE-2011-4848 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 includes a submitted password within an HTTP response body, which allows remote attackers to obtain sensitive… Affected: 10.4.4_build20111103.18 |
| CVE-2011-4847 | – | Dec 16 | SQL injection vulnerability in the Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 allows remote attackers to execute arbitrary SQL commands via a certificateslist… Affected: 10.4.4_build20111103.18 |
| CVE-2011-4777 | – | Dec 16 | Cross-site scripting (XSS) vulnerability in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Panel 10.4.4_build20111103.18 allows remote attackers to inject arbitrary… Affected: 10.4.4_build20111103.18 |
| CVE-2011-4776 | – | Dec 16 | Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 allow remote attackers to inject arbitrary web script or… Affected: 10.4.4_build20111103.18 |
| CVE-2011-4749 | – | Dec 16 | The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 generates a password form field without disabling the autocomplete feature, which makes it easier for remote… Affected: 10.3.1_build1013110726.09 |
| CVE-2011-4748 | – | Dec 16 | The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 has web pages containing e-mail addresses that are not intended for correspondence about the local… Affected: 10.3.1_build1013110726.09 |
| CVE-2011-4747 | – | Dec 16 | The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not prevent the use of weak ciphers for SSL sessions, which makes it easier for remote attackers to… Affected: 10.3.1_build1013110726.09 |
| CVE-2011-4746 | – | Dec 16 | The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not disable the SSL 2.0 protocol, which makes it easier for remote attackers to conduct spoofing… Affected: 10.3.1_build1013110726.09 |
| CVE-2011-4745 | – | Dec 16 | Multiple cross-site scripting (XSS) vulnerabilities in the billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 allow remote attackers to inject arbitrary web script… Affected: 10.3.1_build1013110726.09 |
| CVE-2011-4744 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an… Affected: 10.2.0_build20110407.20 |
| CVE-2011-4743 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to… Affected: 10.2.0_build20110407.20 |
| CVE-2011-4742 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 has web pages containing e-mail addresses that are not intended for correspondence about the local application… Affected: 10.2.0_build20110407.20 |
| CVE-2011-4741 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a database connection string within a web page, which allows remote attackers to obtain potentially… Affected: 10.2.0_build20110407.20 |
| CVE-2011-4740 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates web pages containing external links in response to GET requests with query strings for… Affected: 10.2.0_build20110407.20 |
| CVE-2011-4739 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates a password form field without disabling the autocomplete feature, which makes it easier for remote… Affected: 10.2.0_build20110407.20 |
| CVE-2011-4738 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote… Affected: 10.2.0_build20110407.20 |
| CVE-2011-4737 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a submitted password within an HTTP response body, which allows remote attackers to obtain sensitive… Affected: 10.2.0_build20110407.20 |
| CVE-2011-4736 | – | Dec 16 | The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by… Affected: 10.2.0_build20110407.20 |
| CVE-2011-4735 | – | Dec 16 | Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow remote attackers to inject arbitrary web script or… Affected: 10.2.0_build20110407.20 |
| CVE-2011-4734 | – | Dec 16 | Multiple SQL injection vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow remote attackers to execute arbitrary SQL commands via crafted… Affected: 10.2.0_build20110407.20 |
| CVE-2011-4733 | – | Dec 16 | The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers… Affected: 10.2.0_build1011110331.18 |
| CVE-2011-4732 | – | Dec 16 | The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 omits the Content-Type header's charset parameter for certain resources, which might allow… Affected: 10.2.0_build1011110331.18 |
| CVE-2011-4731 | – | Dec 16 | The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 includes an RFC 1918 IP address within a web page, which allows remote attackers to obtain… Affected: 10.2.0_build1011110331.18 |
| CVE-2011-4730 | – | Dec 16 | The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 generates a password form field without disabling the autocomplete feature, which makes it… Affected: 10.2.0_build1011110331.18 |
| CVE-2011-4729 | – | Dec 16 | The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier… Affected: 10.2.0_build1011110331.18 |
| CVE-2011-4728 | – | Dec 16 | The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote… Affected: 10.2.0_build1011110331.18 |
| CVE-2011-4727 | – | Dec 16 | The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not properly validate string data that is intended for storage in an XML document, which… Affected: 10.2.0_build1011110331.18 |
| CVE-2011-4726 | – | Dec 16 | Multiple cross-site scripting (XSS) vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to inject… Affected: 10.2.0_build1011110331.18 |
| CVE-2011-4725 | – | Dec 16 | Multiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to execute arbitrary SQL… Affected: 10.2.0_build1011110331.18 |
Showing 42