CVE-2011-4767 describes an information disclosure vulnerability in Parallels Plesk Small Business Panel 10.2.0's Site Editor (SiteBuilder) feature, where web pages inadvertently expose email addresses not intended for public correspondence. This allows remote attackers to obtain potentially sensitive information by simply viewing specific files like js/Wizard/Status.js. The vulnerability has a CVSS score of 5.0 (Medium), indicating a low-complexity attack requiring no authentication, with potential for partial confidentiality impact. Its EPSS score is very low (0.0023), suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, nor are there any known public exploit tools like Metasploit or Nuclei. Community discussion and media coverage for this CVE are virtually nonexistent, further indicating its low profile and impact.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
10.2.0CPE matchmatch criteria | cpe:2.3:a:parallels:parallels_plesk_small_business_panel:10.2.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.