Логотип exploitDog
bind:"CVE-2012-1823"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2012-1823"

Количество 9

Количество 9

ubuntu логотип

CVE-2012-1823

около 13 лет назад

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

CVSS3: 9.8
EPSS: Критический
redhat логотип

CVE-2012-1823

около 13 лет назад

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

CVSS2: 6.8
EPSS: Критический
nvd логотип

CVE-2012-1823

около 13 лет назад

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

CVSS3: 9.8
EPSS: Критический
debian логотип

CVE-2012-1823

около 13 лет назад

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when ...

CVSS3: 9.8
EPSS: Критический
github логотип

GHSA-3p37-hv77-x3rp

около 3 лет назад

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

CVSS3: 9.8
EPSS: Критический
oracle-oval логотип

ELSA-2012-0547

около 13 лет назад

ELSA-2012-0547: php53 security update (CRITICAL)

EPSS: Низкий
oracle-oval логотип

ELSA-2012-0546

около 13 лет назад

ELSA-2012-0546: php security update (CRITICAL)

EPSS: Низкий
fstec логотип

BDU:2021-04416

около 13 лет назад

Уязвимость компонента sapi/cgi/cgi_main.c интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код

CVSS2: 7.5
EPSS: Критический
fstec логотип

BDU:2022-02622

около 13 лет назад

Уязвимость компонента sapi/cgi/cgi_main.c интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 3.7
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2012-1823

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

CVSS3: 9.8
94%
Критический
около 13 лет назад
redhat логотип
CVE-2012-1823

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

CVSS2: 6.8
94%
Критический
около 13 лет назад
nvd логотип
CVE-2012-1823

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

CVSS3: 9.8
94%
Критический
около 13 лет назад
debian логотип
CVE-2012-1823

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when ...

CVSS3: 9.8
94%
Критический
около 13 лет назад
github логотип
GHSA-3p37-hv77-x3rp

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

CVSS3: 9.8
94%
Критический
около 3 лет назад
oracle-oval логотип
ELSA-2012-0547

ELSA-2012-0547: php53 security update (CRITICAL)

около 13 лет назад
oracle-oval логотип
ELSA-2012-0546

ELSA-2012-0546: php security update (CRITICAL)

около 13 лет назад
fstec логотип
BDU:2021-04416

Уязвимость компонента sapi/cgi/cgi_main.c интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код

CVSS2: 7.5
94%
Критический
около 13 лет назад
fstec логотип
BDU:2022-02622

Уязвимость компонента sapi/cgi/cgi_main.c интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 3.7
10%
Средний
около 13 лет назад

Уязвимостей на страницу