CVE-2013-4878 | BDVDB-2026-56702 Detail

Description#

The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2012-1823.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/fulldisclosure/2013/Jun/21
http://www.kb.cert.org/vuls/id/673343
http://kb.parallels.com/116241

Exploit#

No public exploit known

History#

Version 12013-07-18Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.