Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2012-2335
HistoryMay 11, 2012 - 10:15 a.m.

Design/Logic Flaw

2012-05-1110:15:00
PRIOn knowledge base
www.prio-n.com
4

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.143 Low

EPSS

Percentile

95.5%

JSON

php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3.12 and 5.4.2 and execute arbitrary code by leveraging improper interaction between the PHP sapi/cgi/cgi_main.c component and a query string beginning with a ± sequence.

CPENameOperatorVersion
phpeq5.4.2
phpeq5.3.12

Related

cve 1
nessus 13
suse 3
ubuntucve 2
openvas 10
checkpoint_advisories 1
ubuntu 1
securityvulns 6
hackerone 1
gentoo 1
cve
cve
CVE-2012-2335
2012-05-11 10:15:00
nessus
nessus
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 8133)
2012-06-11 00:00:00
SuSE 11.1 Security Update : PHP5 (SAT Patch Number 6316)
2013-01-25 00:00:00
openSUSE Security Update : php5 (openSUSE-2012-288)
2014-06-13 00:00:00
suse
suse
Security update for PHP5 (important)
2012-06-09 01:08:41
Security update for PHP5 (important)
2012-07-05 03:08:30
Security update for PHP5 (important)
2013-08-16 21:04:11
ubuntucve
ubuntucve
CVE-2012-2335
2012-05-11 00:00:00
CVE-2012-2336
2012-05-11 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2012:0721-1)
2021-06-09 00:00:00
Mandriva Update for php MDVSA-2012:068-1 (php)
2012-08-03 00:00:00
Mandriva Update for php MDVSA-2012:068-1 (php)
2012-08-03 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP php-cgi Query String Parameter Code Execution (CVE-2012-1823; CVE-2012-2311; CVE-2012-2335; CVE-2012-2336; CVE-2013-4878)
2012-05-14 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2012-06-19 00:00:00
securityvulns
securityvulns
PHP multiple security vulnerabilities
2012-05-24 00:00:00
[security bulletin] HPSBMU02900 rev.2 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulnerabilities
2013-07-19 00:00:00
[security bulletin] HPSBMU02900 rev.3 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulnerabilities
2013-10-02 00:00:00
hackerone
hackerone
Yahoo!: Out of date version
2014-03-30 08:47:50
gentoo
gentoo
PHP: Multiple vulnerabilities
2012-09-24 00:00:00

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.143 Low

EPSS

Percentile

95.5%

JSON
Related for PRION:CVE-2012-2335
cve1nessus13suse3ubuntucve2openvas10checkpoint_advisories1ubuntu1securityvulns6hackerone1gentoo1