Cross-Site Scripting Vulnerability in Parallels Plesk Panel
CVE-2011-4850

Currently unrated

Key Information:

Vendor

Parallels

Status
Parallels Plesk Panel
Vendor
CVE Published:
16 December 2011

What is CVE-2011-4850?

The Control Panel in Parallels Plesk Panel version 10.4.4_build20111103.18 lacks the HTTPOnly flag in Set-Cookie headers, which exposes cookies to potential script access by remote attackers. This vulnerability enables attackers to access sensitive information stored in cookies, increasing the risk of unauthorized actions and data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4....
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.