Vulners
Lucene search
CVE-2012-1823
🗓️ 11 May 2012 10:00:00Reported by certccType 
cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 1765 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 309 |
|---|---|---|---|---|
 | PHP CGI Argument Injection | 5 May 201200:00 | – | zdt |
| PHP CGI Argument Injection Exploit | 5 May 201200:00 | – | zdt |
| PHP CGI Argument Injection Remote Exploit (PHP Version) | 20 May 201200:00 | – | zdt |
| Plesk Apache Zeroday Remote Exploit | 6 Jun 201300:00 | – | zdt |
| Apache Magicka Remote Code Execution Vulnerability | 31 Oct 201300:00 | – | zdt |
 | Exploit for OS Command Injection in Php | 8 Jun 202406:36 | – | githubexploit |
| Exploit for OS Command Injection in Php | 11 Jun 202415:11 | – | githubexploit |
| Exploit for OS Command Injection in Php | 12 Jun 202411:50 | – | githubexploit |
| Exploit for OS Command Injection in Php | 30 Dec 202517:49 | – | githubexploit |
| Exploit for Command Injection in Php | 1 Oct 201713:47 | – | githubexploit |
10
Node
Node
Node
OROROROROROR
Node
OROROROROROROROROROROROROR
10
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| query param | /cgi-bin/php | Remote code execution via CGI PHP by passing command-line options in the query string when PHP-CGI is used as CGI and query lacks '='; exploit bypasses security checks. | CWE-77 | |
| query param | /cgi-bin/php5 | Remote code execution via CGI PHP by passing command-line options in the query string when PHP-CGI is used as CGI and query lacks '='; exploit bypasses security checks. | CWE-77 | |
| query param | /cgi-bin/php-cgi | Remote code execution via CGI PHP by passing command-line options in the query string when PHP-CGI is used as CGI and query lacks '='; exploit bypasses security checks. | CWE-77 | |
| query param | /cgi-bin/php.cgi | Remote code execution via CGI PHP by passing command-line options in the query string when PHP-CGI is used as CGI and query lacks '='; exploit bypasses security checks. | CWE-77 | |
| query param | /cgi-bin/php4 | Remote code execution via CGI PHP by passing command-line options in the query string when PHP-CGI is used as CGI and query lacks '='; exploit bypasses security checks. | CWE-77 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Apr 2026 20:28Current
9.9High risk
Vulners AI Score9.9
CVSS 27.5
CVSS 3.19.8
EPSS0.94363
SSVC