July 24, 2026

CVE Watchtower


← Back to CVE List

CVE-2013-4878NVD

Vulnerability Summary

The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2012-1823.
Severity Level
UNKNOWN
Published Date
Jul 18, 2013
Last Modified
Apr 29, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
13.94%Probability
Root Weakness (CWE)
CWE-264: Unknown/Unlisted Weakness ↗
Refer to the official MITRE database for detailed architectural specifications regarding this weakness.

External References