CVE-2012-0831

Published: 10/02/2012 Updated: 16/08/2022

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

PHP prior to 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote malicious users to conduct SQL injection attacks via a crafted request, related to main/php_variables.c, sapi/cgi/cgi_main.c, and sapi/fpm/fpm/fpm_main.c.

Vulnerable Product	Search on Vulmon	Subscribe to Product
php php

Synopsis Moderate: php53 security, bug fix and enhancement update Type/Severity Security Advisory: Moderate Topic Updated php53 packages that fix multiple security issues, several bugs, andadd one enhancement are now available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this ...

Synopsis Moderate: php security, bug fix and enhancement update Type/Severity Security Advisory: Moderate Topic Updated php packages that fix three security issues, several bugs, and addvarious enhancements are now available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this up ...

Several vulnerabilities have been discovered in PHP, the web scripting language The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2011-1072 It was discovered that insecure handling of temporary files in the PEAR installer could lead to denial of service CVE-2011-4153 Maksymilian Arciemowicz discovered ...

Multiple vulnerabilities in PHP ...

USN 1358-1 introduced a regression in PHP ...

CWE-20 http://svn.php.net/viewvc?view=revision&revision=323016 http://www.securityfocus.com/bid/51954 http://www.ubuntu.com/usn/USN-1358-1 https://launchpadlibrarian.net/92454212/php5_5.3.2-1ubuntu4.13.diff.gz http://secunia.com/advisories/48668 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080037.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080041.html http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html http://support.apple.com/kb/HT5501 http://rhn.redhat.com/errata/RHSA-2013-1307.html http://secunia.com/advisories/55078 https://exchange.xforce.ibmcloud.com/vulnerabilities/73125 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00001.html https://access.redhat.com/errata/RHSA-2013:1307 https://nvd.nist.gov https://usn.ubuntu.com/1358-1/https://www.debian.org/security/./dsa-2408

CVE-2012-0831

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect