Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2011-4855

EPSS 0.75% · P73
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2011-4855

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving admin/customer-service-plan/list/reset-search/true/ and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Parallels Plesk Panel设计错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Parallels Plesk Panel 10.4.4_build20111103.18版本中存在漏洞,该漏洞源于Control Panel删除了某些资源的Content-Type头的charset参数。远程攻击者可通过利用包含admin/customer-service-plan/list/reset-search/true/和某些其他文件的解释冲突导致未明影响。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2011-4855

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-4855

Please Login to view more intelligence information

Same Patch Batch · n/a · 2011-12-16 · 59 CVEs total

CVE-2011-4761Parallels Plesk Small Business Panel 设计错误漏洞
CVE-2011-4849Parallels Plesk Panel信息泄露漏洞
CVE-2011-4852Parallels Plesk Panel信息泄露漏洞
CVE-2011-4851Parallels Plesk Panel 信任管理漏洞
CVE-2011-4850Parallels Plesk Panel 信息泄露漏洞
CVE-2011-4853Parallels Plesk Panel信息泄露漏洞
CVE-2011-4765Parallels Plesk Small Business Panel信息泄露漏洞
CVE-2011-4764Parallels Plesk Small Business Panel多个跨站脚本漏洞
CVE-2011-4763Parallels Plesk Small Business Panel多个SQL注入漏洞
CVE-2011-4762Parallels Plesk Small Business Panel设计错误漏洞
CVE-2011-4766Parallels Plesk Small Business Panel信息泄露漏洞
CVE-2011-4760Parallels Plesk Small Business Panel信息泄露漏洞
CVE-2011-4759Parallels Plesk Small Business Panel信息泄露漏洞
CVE-2011-4758Parallels Plesk Small Business Panel 加密问题漏洞
CVE-2011-4757Parallels Plesk Small Business Panel信任管理漏洞
CVE-2011-4756Parallels Plesk Small Business Panel信息泄露漏洞
CVE-2011-4755Parallels Plesk Small Business Panel 输入验证漏洞
CVE-2011-4754Parallels Plesk Small Business Panel 跨站脚本漏洞
CVE-2011-4753Parallels Plesk Small Business Panel SQL注入漏洞
CVE-2011-4752SmarterTools SmarterStats设计错误漏洞

Showing top 20 of 59 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2011-4855

No comments yet


Leave a comment