Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hrx3-365f-6pg5

Опубликовано: 05 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables.

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables.

EPSS

Процентиль: 66%
0.00509
Низкий

Дефекты

CWE-94

Связанные уязвимости

nvd
почти 13 лет назад

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables.

EPSS

Процентиль: 66%
0.00509
Низкий

Дефекты

CWE-94