Code injection

2013-04-1818:55:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

JSON

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables.

CPENameOperatorVersion
parallels_plesk_paneleq11.0.9

CPE	Name	Operator	Version
	parallels_plesk_panel	eq	11.0.9

References

www.kb.cert.org/vuls/id/310500