CVE:CVE-2011-4763
CNNVD:CNNVD-201112-324
Parallels Plesk Small Business Panel 10.2.0版本中的Site Editor (也称为SiteBuilder)功能中存在多个SQL注入漏洞。远程攻击者可借助特制的输入执行任意SQL命令。正如Wizard/Edit/Html和某些其他文件中证明的。
solution:Upgrade parallels parallels_plesk_small_business_panel to a higher version than 10.2.0,and avoid the version 10.2.0