Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-2335
HistoryMay 11, 2012 - 10:15 a.m.

CVE-2012-2335

2012-05-1110:15:00
CWE-264
[email protected]
web.nvd.nist.gov
90
cve-2012-2335
php
remote code execution
security vulnerability
nvd

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.143 Low

EPSS

Percentile

95.6%

JSON

php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3.12 and 5.4.2 and execute arbitrary code by leveraging improper interaction between the PHP sapi/cgi/cgi_main.c component and a query string beginning with a ± sequence.

CPENameOperatorVersion
php:phpphpeq5.4.2
php:phpphpeq5.3.12

Related

prion 1
nessus 13
suse 3
ubuntucve 2
openvas 10
checkpoint_advisories 1
ubuntu 1
securityvulns 6
hackerone 1
gentoo 1
prion
prion
Design/Logic Flaw
2012-05-11 10:15:00
nessus
nessus
SuSE 11.1 Security Update : PHP5 (SAT Patch Number 6316)
2013-01-25 00:00:00
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 8133)
2012-06-11 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2012:068-1)
2012-05-07 00:00:00
suse
suse
Security update for PHP5 (important)
2012-06-09 01:08:41
Security update for PHP5 (important)
2012-07-05 03:08:30
Security update for PHP5 (important)
2013-08-16 21:04:11
ubuntucve
ubuntucve
CVE-2012-2335
2012-05-11 00:00:00
CVE-2012-2336
2012-05-11 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2012:0721-1)
2021-06-09 00:00:00
Mandriva Update for php MDVSA-2012:068-1 (php)
2012-08-03 00:00:00
Mandriva Update for php MDVSA-2012:068-1 (php)
2012-08-03 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP php-cgi Query String Parameter Code Execution (CVE-2012-1823; CVE-2012-2311; CVE-2012-2335; CVE-2012-2336; CVE-2013-4878)
2012-05-14 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2012-06-19 00:00:00
securityvulns
securityvulns
PHP multiple security vulnerabilities
2012-05-24 00:00:00
[security bulletin] HPSBMU02900 rev.2 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulnerabilities
2013-07-19 00:00:00
[ MDVSA-2012:071 ] php
2012-05-14 00:00:00
hackerone
hackerone
Yahoo!: Out of date version
2014-03-30 08:47:50
gentoo
gentoo
PHP: Multiple vulnerabilities
2012-09-24 00:00:00

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.143 Low

EPSS

Percentile

95.6%

JSON
Related for CVE-2012-2335
prion1nessus13suse3ubuntucve2openvas10checkpoint_advisories1ubuntu1securityvulns6hackerone1gentoo1