CVE-2011-4854: Critical severity plesk vulnerability
The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type data in HTML META elements, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving the getenabledproducticon program. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4854?
The severity of CVE-2011-4854 is characterized as a medium risk due to the potential for remote attacks via cross-site scripting vulnerabilities.
How do I fix CVE-2011-4854?
To fix CVE-2011-4854, update the Parallels Plesk Panel to a version that addresses this vulnerability.
What types of attacks are possible with CVE-2011-4854?
CVE-2011-4854 could allow attackers to exploit reflected cross-site scripting vulnerabilities, leading to potential data theft or session hijacking.
Which versions of Parallels Plesk Panel are affected by CVE-2011-4854?
CVE-2011-4854 specifically affects Parallels Plesk Panel version 10.4.4_build20111103.18.
Is Microsoft Windows Server also affected by CVE-2011-4854?
CVE-2011-4854 is related to Parallels Plesk Panel and is not directly a vulnerability in Microsoft Windows Server.