CVE-2013-0132

2013-04-1818:00:00

certcc

www.cve.org

parallels plesk

panel 11.0.9

suexec

cgi-wrapper

vulnerability

remote code execution

AI Score

7.5

Confidence

High

EPSS

0.006

Percentile

78.0%

JSON

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables.

References

www.kb.cert.org/vuls/id/310500