CVE-2013-0132

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 11.0.9

Description The issue concerns the suexec implementation, which contains a cgi-wrapper whitelist entry. This allows remote attackers to execute arbitrary PHP code via a request containing crafted environment variables.

Recommendations For Parallels Plesk Panel version 11.0.9, consider restricting access to the suexec implementation until a patch is available. As a temporary workaround, avoid using crafted environment variables in requests to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.