Files
cve/2011/CVE-2011-4854.md
2025-09-29 21:09:30 +02:00

1.0 KiB

CVE-2011-4854

Description

The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type data in HTML META elements, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving the get_enabled_product_icon program. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.

POC

Reference

Github

No PoCs found on GitHub currently.