CVE-2011-4768 in Plesk Small Business Panelinfo

Zusammenfassung

von MITRE

The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header s charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving Wizard/Edit/Modules/Image and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservieren

11.12.2011

Veröffentlichung

16.12.2011

Moderieren

akzeptiert

Eintrag

VDB-59748

CPE

bereit

EPSS

0.02072

KEV

nein

Aktivitäten

very low

Quellen

Interested in the pricing of exploits?

See the underground prices here!