SQL Injection in Parallels Plesk Small Business Panel
CVE-2011-4763
Multiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by Wizard/Edit/Html and certain other files.
Vulnerability class: SQL Injection
EPSS: 0.011 (62.8th percentile) — read the EPSS interpretation.
Affected products
- Parallels Parallels_plesk_small_business_panel — versions 10.2.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MISC)