CVE-2012-1823

PHP-CGI Query String Parameter Vulnerability

PHP — PHP

Added to KEV catalog: 25 March 2022
Federal remediation due date: 15 April 2022
Weakness classification (CWE): CWE-20

CISA Description

sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2012-1823

View on NVD View on MITRE CVE View full CISA catalog

More PHP Vulnerabilities

CVE-2016-10033

PHPMailer Command Injection Vulnerability

CVE-2019-11043

PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services