CVE-2012-1823
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.
CISA Known Exploited Vulnerability
Vendor / Product
PHP — PHP
Date Added
2022-03-25
Remediation Due
2022-04-15
https://nvd.nist.gov/vuln/detail/CVE-2012-1823
Weakness Classification (1)
Affected Software (30)
| Vendor | Product | Version |
|---|---|---|
| apple | mac_os_x | 10.6.8 – 10.7.5 |
| apple | mac_os_x | 10.8.0 – 10.8.2 |
| debian | debian_linux | 6.0 |
| fedoraproject | fedora | 39 |
| fedoraproject | fedora | 40 |
| hp | hp-ux | b.11.23 |
| hp | hp-ux | b.11.31 |
| opensuse | opensuse | 11.4 |
| opensuse | opensuse | 12.1 |
| php | php | < 5.3.12 |
| php | php | 5.4.0 – 5.4.2 |
| redhat | application_stack | 2.0 |
| redhat | enterprise_linux_desktop | 6.0 |
| redhat | enterprise_linux_eus | 5.6 |
| redhat | enterprise_linux_eus | 6.1 |
| redhat | enterprise_linux_eus | 6.2 |
| redhat | enterprise_linux_server | 5.0 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_server_aus | 5.3 |
| redhat | enterprise_linux_server_aus | 5.6 |
| redhat | enterprise_linux_workstation | 5.0 |
| redhat | enterprise_linux_workstation | 6.0 |
| redhat | gluster_storage_server_for_on-premise | 2.0 |
| redhat | storage | 2.0 |
| redhat | storage_for_public_cloud | 2.0 |
| suse | linux_enterprise_server | 10 |
| suse | linux_enterprise_server | 11 |
| suse | linux_enterprise_server | 11 |
| suse | linux_enterprise_software_development_kit | 10 |
| suse | linux_enterprise_software_development_kit | 11 |
References & Advisories (31)
US Government Resource
Third Party Advisory
US Government Resource
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Release Notes
Patch
Mailing List
Third Party Advisory
Mailing List
Third Party Advisory
Mailing List
Third Party Advisory
Mailing List
Third Party Advisory
Mailing List
Release Notes
Mailing List
Release Notes
Mailing List
Release Notes
Mailing List
Mailing List
Exploit
Third Party Advisory
US Government Resource
Exploit
Patch
Release Notes
Exploit
Patch
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Exploit
Showing 25 of 31 references