Parallels : Security Vulnerabilities, CVEs, Published In 2011 (Denial of service) CVSS score >= 9
Parallels Plesk Small Business Panel 10.2.0 does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service (parsing error) or possibly have unspecified other impact via a crafted cookie, as demonstrated by cookies to client@1/domain@1/hosting/file-manager/ and certain other files.
Max CVSS
10.0
EPSS Score
0.48%
Published
2011-12-16
Updated
2017-08-29
The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service (parsing error) or possibly have unspecified other impact via a crafted REST URL parameter, as demonstrated by parameters to admin/ and certain other files.
Max CVSS
10.0
EPSS Score
0.48%
Published
2011-12-16
Updated
2019-04-22
2 vulnerabilities found