The fix for CVE-2012-1823 does not completely correct the CGI query vulnerability. Disclosure of PHP source code and code execution via query paramenters are still possible.

Note that his vulnerability is exploitable only when PHP is used by CGI-based configurations. Apache with ‘mod-php’ is not an exploitable configuration.

Binary data 801100.prm

References

eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823

.php.net/archive/2012.php#id2012-05-08-1

.php.net/ChangeLog-5.php#5.3.13

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2311

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2335

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2336

bugs.php.net/bug.php?id=61910

symantec 1

centos 2

saint 4

amazon 1

nessus 34

openvas 51

thn 5

cert 2

oraclelinux 2

prion 4

threatpost 11

securityvulns 1

packetstorm 6

zdt 5

seebug 7

nvd 4

redhat 5

exploitpack 3

cisa_kev 2

attackerkb 2

freebsd 2

cvelist 4

metasploit 1

canvas 1

veracode 1

nuclei 1

cve 4

fedora 10

suse 4

githubexploit 3

ubuntucve 3

hackerone 1

ubuntu 1

exploitdb 6

osv 1

nmap 1

debian 1

slackware 1

checkpoint_advisories 1

symantec

PHP 'php-cgi' Information Disclosure Vulnerability

2012-05-04 00:00:00

centos

php security update

2012-05-07 21:09:19

php53 security update

2012-05-07 23:01:16

saint

PHP CGI Query String Parameters Command Execution

2012-05-15 00:00:00

PHP CGI Query String Parameters Command Execution

2012-05-15 00:00:00

PHP CGI Query String Parameters Command Execution

2012-05-15 00:00:00

amazon

Critical: php

2012-05-09 14:54:00

nessus

Oracle Linux 5 : php53 (ELSA-2012-0547)

2013-07-12 00:00:00

Oracle Linux 5 / 6 : php (ELSA-2012-0546)

2013-07-12 00:00:00

PHP 5.3.x < 5.3.13 CGI Query String Code Execution

2012-06-05 00:00:00

openvas

RedHat Update for php53 RHSA-2012:0547-01

2012-05-08 00:00:00

CentOS Update for php53 CESA-2012:0547 centos5

2012-07-30 00:00:00

RedHat Update for php RHSA-2012:0546-01

2012-05-08 00:00:00

thn

Linux worm targeting Routers, Set-top boxes and Security Cameras with PHP-CGI Vulnerability

2013-11-30 09:08:00

Linux worm targeting Routers, Set-top boxes and Security Cameras with PHP-CGI Vulnerability

2013-11-30 20:08:00

Linux Worm targets Internet-enabled Home appliances to Mine Cryptocurrencies

2014-03-19 22:26:00

cert

Parallels Plesk Panel phppath/php vulnerability

2013-06-07 00:00:00

PHP-CGI query string parameter vulnerability

2012-05-03 00:00:00

oraclelinux

php security update

2012-05-07 00:00:00

php53 security update

2012-05-07 00:00:00

prion

Design/Logic Flaw

2012-05-11 10:15:00

Design/Logic Flaw

2012-05-11 10:15:00

Design/Logic Flaw

2012-05-11 10:15:00

threatpost

FEMA: State, Local Officials Not Prepared to Respond to Cyberattack

2012-05-04 15:25:34

Apple Fixes Serious Flaws in iOS 5.1.1

2012-05-08 13:49:34

Leaders from China, U.S. Meet, Agree to Rally Against Cyber Threats

2012-05-08 17:24:22

securityvulns

PHP CGI Argument Injection Remote Exploit V0.3 - PHP Version

2012-05-24 00:00:00

packetstorm

PHP CGI Argument Injection

2012-05-06 00:00:00

Apache + PHP 5.x Remote Code Execution Python Exploit #2

2013-10-31 00:00:00

PHP CGI Argument Injection

2012-05-22 00:00:00

zdt

PHP CGI Argument Injection Remote Exploit (PHP Version)

2012-05-20 00:00:00

Plesk Apache Zeroday Remote Exploit

2013-06-06 00:00:00

PHP CGI Argument Injection

2012-05-05 00:00:00

seebug

Apache / PHP 5.x - cgi-bin Remote Code Execution Exploit

2014-07-01 00:00:00

Plesk < 9.5.4 - Zeroday Remote Exploit

2014-07-01 00:00:00

PHP CGI Argument Injection Exploit

2014-07-01 00:00:00

nvd

CVE-2012-1823

2012-05-11 10:15:48

CVE-2012-2336

2012-05-11 10:15:48

CVE-2013-4878

2013-07-18 16:51:56

redhat

(RHSA-2012:0569) Critical: php53 security update

2012-05-10 00:00:00

(RHSA-2012:0568) Critical: php security update

2012-05-10 00:00:00

(RHSA-2012:0546) Critical: php security update

2012-05-07 00:00:00

exploitpack

Apache + PHP 5.3.12 5.4.2 - cgi-bin Remote Code Execution

2013-10-29 00:00:00

PHP 5.3.12 5.4.2 - CGI Argument Injection

2012-05-05 00:00:00

Plesk 9.5.4 - Remote Command Execution

2013-06-05 00:00:00

cisa_kev

PHP-CGI Query String Parameter Vulnerability

2022-03-25 00:00:00

PHP-CGI OS Command Injection Vulnerability

2024-06-12 00:00:00

attackerkb

CVE-2012-1823

2012-05-11 00:00:00

CVE-2013-4878

2013-07-18 00:00:00

freebsd

php -- vulnerability in certain CGI-based setups

2012-05-03 00:00:00

php -- multiple vulnerabilities

2012-05-08 00:00:00

cvelist

CVE-2012-1823

2012-05-11 10:00:00

CVE-2013-4878

2013-07-18 16:00:00

CVE-2012-2311

2012-05-11 10:00:00

metasploit

PHP CGI Argument Injection

2012-05-09 16:01:15

canvas

Immunity Canvas: PHP_CGI_REMOTE

2012-05-11 10:15:00

veracode

Arbitrary Code Execution

2019-01-15 08:51:10

nuclei

PHP CGI v5.3.12/5.4.2 Remote Code Execution

2021-07-20 09:32:27

cve

CVE-2012-1823

2012-05-11 10:15:48

CVE-2012-2336

2012-05-11 10:15:48

CVE-2012-2311

2012-05-11 10:15:48

fedora

[SECURITY] Fedora 16 Update: maniadrive-1.2-32.fc16.5

2012-05-27 01:52:21

[SECURITY] Fedora 15 Update: php-eaccelerator-0.9.6.1-9.fc15.5

2012-05-27 07:21:55

[SECURITY] Fedora 15 Update: maniadrive-1.2-32.fc15.5

2012-05-27 07:21:55

suse

update for php5 (critical)

2012-05-07 16:08:55

Security update for PHP5 (critical)

2012-05-09 06:08:17

Security update for PHP5 (critical)

2012-05-09 22:08:16

githubexploit

Exploit for OS Command Injection in Php

2024-06-08 06:36:14

Exploit for OS Command Injection in Php

2024-06-11 15:11:56

Exploit for OS Command Injection in Php

2024-07-03 15:30:52

ubuntucve

CVE-2012-1823

2012-05-03 00:00:00

CVE-2012-2311

2012-05-04 00:00:00

CVE-2012-2336

2012-05-11 00:00:00

hackerone

curl: Incorrect Encoding Conversion in hostname results in indeterminate SSRF vulnerabilities

2024-06-14 08:39:46

ubuntu

PHP vulnerability

2012-05-04 00:00:00

exploitdb

Plesk < 9.5.4 - Remote Command Execution

2013-06-05 00:00:00

PHP < 5.3.12 / < 5.4.2 - CGI Argument Injection

2012-05-05 00:00:00

Apache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution + Scanner

2013-10-31 00:00:00

osv

php5 - several

2012-05-09 00:00:00

nmap

http-vuln-cve2012-1823 NSE Script

2012-05-08 05:56:04

debian

[SECURITY] [DSA 2465-1] php5 security update

2012-05-09 17:23:53

slackware

[slackware-security] php

2024-06-06 19:53:01

checkpoint_advisories

PHP php-cgi Query String Parameter Code Execution (CVE-2012-1823; CVE-2012-2311; CVE-2012-2335; CVE-2012-2336; CVE-2013-4878)

2012-05-14 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.915

Percentile

98.9%

JSON

Related for 801100.PRM