Lucene search
SAINT CorporationSAINT:383F4FB67DCF7CAE7E06F44A5B5DC13FHistoryMay 15, 2012 - 12:00 a.m.
PHP CGI Query String Parameters Command Execution
2012-05-1500:00:00
SAINT Corporation
my.saintcorporation.com
156
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.915
Percentile
98.9%
Added: 05/15/2012
CVE: CVE-2012-1823
BID: 53388
OSVDB: 81633
Background
PHP is a widely used general-purpose scripting language that is especially suited for Web development.
Problem
When configured as a CGI script (aka php-cgi), PHP does not properly handle query string parameters which are passed directly to the php-cgi program. This can be exploited to execute arbitrary system commands or disclose the PHP source code.
Resolution
Upgrade PHP to version 5.4.3 or 5.3.13 or higher.
References
<http://secunia.com/advisories/49014>
<http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823>
Limitations
This exploit has been tested against PHP 5.3.10 on Windows XP SP3 and PHP 5.4.0 on Ubuntu 11.10 Linux.
Platforms
Windows
Linux
Mac OS X
Related
symantec
symantec
PHP 'php-cgi' Information Disclosure Vulnerability
2012-05-04 00:00:00
centos
centos
php security update
2012-05-07 21:09:19
php53 security update
2012-05-07 23:01:16
saint
saint
PHP CGI Query String Parameters Command Execution
2012-05-15 00:00:00
PHP CGI Query String Parameters Command Execution
2012-05-15 00:00:00
PHP CGI Query String Parameters Command Execution
2012-05-15 00:00:00
cert
cert
Parallels Plesk Panel phppath/php vulnerability
2013-06-07 00:00:00
PHP-CGI query string parameter vulnerability
2012-05-03 00:00:00
amazon
amazon
Critical: php
2012-05-09 14:54:00
openvas
openvas
RedHat Update for php53 RHSA-2012:0547-01
2012-05-08 00:00:00
CentOS Update for php CESA-2012:0546 centos6
2012-07-30 00:00:00
Mandriva Update for php MDVSA-2012:068 (php)
2012-08-03 00:00:00
thn
thn
Linux worm targeting Routers, Set-top boxes and Security Cameras with PHP-CGI Vulnerability
2013-11-30 09:08:00
Linux worm targeting Routers, Set-top boxes and Security Cameras with PHP-CGI Vulnerability
2013-11-30 20:08:00
Linux Worm targets Internet-enabled Home appliances to Mine Cryptocurrencies
2014-03-19 22:26:00
nessus
nessus
Oracle Linux 5 / 6 : php (ELSA-2012-0546)
2013-07-12 00:00:00
Oracle Linux 5 : php53 (ELSA-2012-0547)
2013-07-12 00:00:00
Amazon Linux AMI : php (ALAS-2012-77)
2013-09-04 00:00:00
exploitpack
exploitpack
PHP 5.3.12 5.4.2 - CGI Argument Injection
2012-05-05 00:00:00
Apache + PHP 5.3.12 5.4.2 - cgi-bin Remote Code Execution
2013-10-29 00:00:00
Plesk 9.5.4 - Remote Command Execution
2013-06-05 00:00:00
threatpost
threatpost
Exploits for Two-Year-Old PHP Security Vulnerability Found
2014-03-19 12:12:20
U.S. Cyber Command Using Classified Intel To Scare CEOs To Action
2012-05-09 18:39:14
Leaders from China, U.S. Meet, Agree to Rally Against Cyber Threats
2012-05-08 17:24:22
redhat
redhat
(RHSA-2012:0568) Critical: php security update
2012-05-10 00:00:00
(RHSA-2012:0569) Critical: php53 security update
2012-05-10 00:00:00
(RHSA-2012:0546) Critical: php security update
2012-05-07 00:00:00
packetstorm
packetstorm
PHP CGI Argument Injection
2012-05-22 00:00:00
PHP-CGI Argument Injection Remote Code Execution
2012-12-24 00:00:00
Apache + PHP 5.x Remote Code Execution Python Exploit #2
2013-10-31 00:00:00
freebsd
freebsd
php -- vulnerability in certain CGI-based setups
2012-05-03 00:00:00
php -- multiple vulnerabilities
2012-05-08 00:00:00
zdt
zdt
PHP CGI Argument Injection
2012-05-05 00:00:00
Plesk Apache Zeroday Remote Exploit
2013-06-06 00:00:00
PHP CGI Argument Injection Remote Exploit (PHP Version)
2012-05-20 00:00:00
seebug
seebug
PHP CGI Argument Injection
2014-07-01 00:00:00
Apache / PHP 5.x Remote Code Execution Exploit
2013-10-31 00:00:00
PHP CGI Argument Injection Exploit
2014-07-01 00:00:00
cvelist
cvelist
metasploit
metasploit
PHP CGI Argument Injection
2012-05-09 16:01:15
cisa_kev
cisa_kev
PHP-CGI Query String Parameter Vulnerability
2022-03-25 00:00:00
PHP-CGI OS Command Injection Vulnerability
2024-06-12 00:00:00
attackerkb
attackerkb
CVE-2012-1823
2012-05-11 00:00:00
CVE-2013-4878
2013-07-18 00:00:00
prion
prion
Design/Logic Flaw
2012-05-11 10:15:00
Design/Logic Flaw
2012-05-11 10:15:00
Design/Logic Flaw
2012-05-11 10:15:00
oraclelinux
oraclelinux
php security update
2012-05-07 00:00:00
php53 security update
2012-05-07 00:00:00
securityvulns
securityvulns
PHP CGI Argument Injection Remote Exploit V0.3 - PHP Version
2012-05-24 00:00:00
nvd
nvd
canvas
canvas
Immunity Canvas: PHP_CGI_REMOTE
2012-05-11 10:15:00
veracode
veracode
Arbitrary Code Execution
2019-01-15 08:51:10
nuclei
nuclei
PHP CGI v5.3.12/5.4.2 Remote Code Execution
2021-07-20 09:32:27
cve
cve
fedora
fedora
[SECURITY] Fedora 16 Update: maniadrive-1.2-32.fc16.5
2012-05-27 01:52:21
[SECURITY] Fedora 15 Update: php-5.3.13-1.fc15
2012-05-27 07:21:55
[SECURITY] Fedora 15 Update: php-eaccelerator-0.9.6.1-9.fc15.5
2012-05-27 07:21:55
suse
suse
update for php5 (critical)
2012-05-07 16:08:55
Security update for PHP5 (critical)
2012-05-09 02:08:18
Security update for PHP5 (critical)
2012-05-09 06:08:17
githubexploit
githubexploit
Exploit for OS Command Injection in Php
2024-06-08 06:36:14
Exploit for OS Command Injection in Php
2024-06-11 15:11:56
Exploit for OS Command Injection in Php
2024-07-03 15:30:52
ubuntucve
ubuntucve
hackerone
hackerone
ubuntu
ubuntu
PHP vulnerability
2012-05-04 00:00:00
exploitdb
exploitdb
Plesk < 9.5.4 - Remote Command Execution
2013-06-05 00:00:00
PHP < 5.3.12 / < 5.4.2 - CGI Argument Injection
2012-05-05 00:00:00
Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution
2013-10-29 00:00:00
debian
debian
[SECURITY] [DSA 2465-1] php5 security update
2012-05-09 17:23:53
osv
osv
php5 - several
2012-05-09 00:00:00
nmap
nmap
http-vuln-cve2012-1823 NSE Script
2012-05-08 05:56:04
slackware
slackware
[slackware-security] php
2024-06-06 19:53:01
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.915
Percentile
98.9%
Related for SAINT:383F4FB67DCF7CAE7E06F44A5B5DC13F