CVEvulnerability

CVE-2012-1823

9.8 CRITICAL Known exploited Published 2012-05-11 Modified 2026-06-16 Official page ↗

CISA Known Exploited Vulnerability

PHP-CGI Query String Parameter Vulnerability — PHP PHP

sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.

Added to KEV
2022-03-25
Remediation due
2022-04-15
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2012-1823
Status
Analyzed
Published
2012-05-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-77

Description

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

Affected configurations

• php php (< 5.3.12) • php php (>= 5.4.0 < 5.4.2) • fedoraproject fedora 39 • fedoraproject fedora 40 • debian debian linux 6.0 • hp hp-ux b.11.23 • hp hp-ux b.11.31 • opensuse opensuse 11.4 • opensuse opensuse 12.1 • suse linux enterprise server 10 • suse linux enterprise server 11 • suse linux enterprise software development kit 10 • suse linux enterprise software development kit 11 • apple mac os x (>= 10.6.8 < 10.7.5) • apple mac os x (>= 10.8.0 < 10.8.2) • redhat application stack 2.0 • redhat gluster storage server for on-premise 2.0 • redhat storage 2.0 • redhat storage for public cloud 2.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux eus 5.6 • redhat enterprise linux eus 6.1 • redhat enterprise linux eus 6.2 • redhat enterprise linux server 5.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server aus 5.3 • redhat enterprise linux server aus 5.6 • redhat enterprise linux workstation 5.0 • redhat enterprise linux workstation 6.0

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References