CVE-2011-4748

Parallels Plesk Panel 10.3.1_build1013110726.09 - Exposure of Sensitive Information via Billing System Web Pages

Title source: llm

Description

The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a page, as demonstrated by js/ajax/core/ajax.inc.js and certain other files.

References (2)

Core 2

Core References

Various Sources x_refsource_misc

http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/72261

Scores

EPSS 0.0116

EPSS Percentile 63.3%

Details

CWE

CWE-200

Status published

Products (1)

parallels/parallels_plesk_panel 10.3.1_build1013110726.09

Published Dec 16, 2011

Tracked Since Feb 18, 2026