CVE-2011-4745: XSS

Published Dec 16, 2011

Updated

Multiple cross-site scripting (XSS) vulnerabilities in the billing system for Parallels Plesk Panel 10.3.1build1013110726.09 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/index.php/default and certain other files.

Affected Software

2 affected components

Parallels Parallels Plesk Panel=10.3.1_build1013110726.09

redhat Enterprise Linux=6.0

Event History

Dec 16, 2011

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Data Sourced

11:55 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2011-4745?

CVE-2011-4745 is classified as a medium-severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2011-4745?

To fix CVE-2011-4745, update to a version of Parallels Plesk Panel that resolves the XSS vulnerabilities.

What products are affected by CVE-2011-4745?

CVE-2011-4745 affects Parallels Plesk Panel version 10.3.1_build1013110726.09.

Can CVE-2011-4745 be exploited remotely?

Yes, CVE-2011-4745 can be exploited remotely by attackers to inject arbitrary scripts.

What types of attacks are possible with CVE-2011-4745?

CVE-2011-4745 allows for cross-site scripting (XSS) attacks, enabling attackers to execute malicious scripts in a user's browser.