CVE-2013-4878NVD

Vulnerability Summary

The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2012-1823.

Severity Level

UNKNOWN

Published Date

Jul 18, 2013

Last Modified

Apr 29, 2026

Exploitation Status

No confirmed exploitation yet

EPSS Score (30-Day)

13.94%Probability

Root Weakness (CWE)

CWE-264: Unknown/Unlisted Weakness ↗

Refer to the official MITRE database for detailed architectural specifications regarding this weakness.

Affected & Patched Versions

Affected Versions

Parallels Parallels Plesk Panel
Parallels Parallels Small Business Panel

Patched Versions

Not provided by NVD for this CVE.

📧Email Delivery — Threat intel straight to your inbox.

♾️Unlimited Vendors — Track your entire stack.

🚨All New CVEs — Be the first to know.

⚙️Custom EPSS — Filter noise, focus on risk.

💬Webhooks — Slack & Teams integration.

🚫Ad-Free — Uninterrupted experience.