vendor:
N/A
by:
egypt, hdm
N/A
CVSS
N/A
Argument Injection
94
CWE
Product Name: N/A
Affected Version From: 5.3.12
Affected Version To: 5.4.2
Patch Exists: YES
Related CWE: CVE-2012-1823
CPE: N/A
Metasploit:
https://www.rapid7.com/db/vulnerabilities/oracle_linux-cve-2022-31631/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2013-0686/, https://www.rapid7.com/db/vulnerabilities/apple-osx-php-cve-2012-1823/, https://www.rapid7.com/db/vulnerabilities/apple-osx-php-cve-2012-2311/, https://www.rapid7.com/db/vulnerabilities/hpux-cve-2012-1823/, https://www.rapid7.com/db/vulnerabilities/hpux-cve-2012-2311/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2012-0568/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2012-0569/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2012-2311/, https://www.rapid7.com/db/vulnerabilities/amazon-linux-ami-alas-2012-77/, https://www.rapid7.com/db/vulnerabilities/ubuntu-USN-1437-1/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2012-0546/, https://www.rapid7.com/db/vulnerabilities/apple-osx-note-cve-2012-1823/, https://www.rapid7.com/db/vulnerabilities/freebsd-vid-59b68b1e-9c78-11e1-b5e0-000c299b62e1/, https://www.rapid7.com/db/vulnerabilities/freebsd-vid-60de13d5-95f0-11e1-806a-001143cd36d8/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2012-1823/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2012-2336/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2012-1823/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2012-2336/, https://www.rapid7.com/db/vulnerabilities/hpsmh-cve-2012-2311/, https://www.rapid7.com/db/?q=CVE-2012-1823&type=&page=2, https://www.rapid7.com/db/?q=CVE-2012-1823&type=&page=2
Other Scripts:
N/A
Tags: cve2012,kev,vulhub,rce,php,cve
CVSS Metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P
Nuclei Metadata: {'max-request': 1, 'vendor': 'php', 'product': 'php'}
Platforms Tested: PHP
2012
PHP CGI Argument Injection
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.
Mitigation:
No unescaped '=' in the query string
