Information disclosure in Parallels Plesk Small Business Panel
CVE-2011-4766
The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allows remote attackers to obtain ASP source code via a direct request to wysiwyg/fckconfig.js. NOTE: CVE disputes this issue because ASP is only used in a JavaScript comment
Vulnerability class: Information Disclosure
EPSS: 0.012 (64.2th percentile) — read the EPSS interpretation.
Affected products
- Parallels Parallels_plesk_small_business_panel — versions 10.2.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)