CVE-2011-4725

Publication date

2011-12-16 11:00:00

Family

mitre

State

PUBLISHED

Description

Multiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by login_up.php3 and certain other files.