CVE-2011-4768

all versions

The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset p

CVE-2011-4767

all versions

The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses

CVE-2011-4766

all versions

The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allows remote attackers to obtain ASP sou

CVE-2011-4765

all versions

The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a S

CVE-2011-4764

all versions

Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business

CVE-2011-4763

all versions

Multiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0

CVE-2011-4762

all versions

Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which might allow remote a

CVE-2011-4761

all versions

Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might a

CVE-2011-4760

all versions

Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence abo

CVE-2011-4759

all versions

Parallels Plesk Small Business Panel 10.2.0 generates web pages containing external links in response to GET requests with query s

CVE-2011-4758

all versions

Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain s

CVE-2011-4757

all versions

Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete feature, which make

CVE-2011-4756

all versions

Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it

CVE-2011-4755

all versions

Parallels Plesk Small Business Panel 10.2.0 does not properly validate string data that is intended for storage in an XML document

CVE-2011-4754

all versions

Multiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to injec

CVE-2011-4753

all versions

Multiple SQL injection vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute arbitrary