Parallels Plesk Panel Security Vulnerabilities and Issues — Parallels Plesk Panel CVE List

Lucene search

ParallelsParallels Plesk Panel

2 matches found

CVE•added 2013/04/18 6:55 p.m.•46 views

CVE-2013-0132

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables.

6.8CVSS7.8AI score0.0047EPSS

CVE•added 2019/11/13 8:15 p.m.•38 views

CVE-2019-18793

Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter.

6.1CVSS5.9AI score0.00328EPSS