Exposures › CVE-2012-1823

CVE-2012-1823

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-03-25

Reference

https://nvd.nist.gov/vuln/detail/CVE-2012-1823

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.

Players implicated

php · vendor php · product

Description

sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.