Approved changes feed: RSS · Atom

cpe:2.3:a:parallels:parallels_plesk_panel:11.0.9:*:*:*:*:*:*:*

part: a version: 11.0.9 update: *

VendorParallels (f7bc486c-fad7-5571-9bc2-c91e15af2082)
ProductParallels Plesk Panel (5163204a-eb37-5a5c-8c26-05b8bf813fc7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-0133 vulnerable 2026-06-03 14:32:35.411275 Details available
Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allows local users to gain privileges via a crafted PATH environment variable.
Published: 2013-04-18T18:00:00.000Z
Updated: 2024-09-16T23:00:51.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0132 vulnerable 2026-06-03 14:32:35.410925 Details available
The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables.
Published: 2013-04-18T18:00:00.000Z
Updated: 2024-09-17T00:45:53.126Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.