CVE-2013-0132

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cret@cert.org

Published

2013-04-18

Last modified

2024-09-17

Weaknesses

CWE-94

Affected products

• Parallels Plesk Panel (Parallels)

References

• http://www.kb.cert.org/vuls/id/310500