CVE-2013-4878

The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for…

published July 18, 2013

CVSS

—

EPSS

31%

Percentile

98.3

In the wild

Unconfirmed

What it is

The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2012-1823.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.31072 · 98.3th percentile
Published: 2013-07-18T16:00Z

EPSS history

Timeline

18 JUL 16:00Z
The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for…
cvelistv5