Description
The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Automatic 'q' Parameter SQL Injection (2.0.3)
WordPress Plugin Simple Membership Security Bypass (3.8.5)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3369)
WordPress Plugin Store Locator Plus for WordPress Cross-Site Scripting (4.5.10)
WordPress Plugin Seriously Simple Podcasting Cross-Site Request Forgery (2.16.0)