// For flags

CVE-2012-2311

Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

4
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.

sapi/cgi/cgi_main.c de PHP anteriores a 5.3.13 y 5.4.x anteriores a 5.4.3, si está configurado como un script CGI (php-cgi), no maneja apropiadamente cadenas de petición que contienen una secuencia %3D pero ningún = (signo igual). Lo que permite a atacantes remotos ejecutar código arbitrario colocando opciones de comandos en la cadena de petición. Relacionado con la falta de supresión de un determinado php_getopt para el caso 'd'. NOTA: esta vulnerabilidad se debe a una solución incompleta de CVE-2012-1823.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2012-04-19 CVE Reserved
  • 2012-05-04 First Exploit
  • 2012-05-06 CVE Published
  • 2024-02-08 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CAPEC
References (21)
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
<= 5.3.12
Search vendor "Php" for product "Php" and version " <= 5.3.12"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
1.0
Search vendor "Php" for product "Php" and version "1.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
2.0
Search vendor "Php" for product "Php" and version "2.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
2.0b10
Search vendor "Php" for product "Php" and version "2.0b10"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0
Search vendor "Php" for product "Php" and version "3.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.1
Search vendor "Php" for product "Php" and version "3.0.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.2
Search vendor "Php" for product "Php" and version "3.0.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.3
Search vendor "Php" for product "Php" and version "3.0.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.4
Search vendor "Php" for product "Php" and version "3.0.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.5
Search vendor "Php" for product "Php" and version "3.0.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.6
Search vendor "Php" for product "Php" and version "3.0.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.7
Search vendor "Php" for product "Php" and version "3.0.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.8
Search vendor "Php" for product "Php" and version "3.0.8"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.9
Search vendor "Php" for product "Php" and version "3.0.9"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.10
Search vendor "Php" for product "Php" and version "3.0.10"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.11
Search vendor "Php" for product "Php" and version "3.0.11"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.12
Search vendor "Php" for product "Php" and version "3.0.12"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.13
Search vendor "Php" for product "Php" and version "3.0.13"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.14
Search vendor "Php" for product "Php" and version "3.0.14"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.15
Search vendor "Php" for product "Php" and version "3.0.15"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.16
Search vendor "Php" for product "Php" and version "3.0.16"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.17
Search vendor "Php" for product "Php" and version "3.0.17"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
3.0.18
Search vendor "Php" for product "Php" and version "3.0.18"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0
Search vendor "Php" for product "Php" and version "4.0"
beta_4_patch1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0
Search vendor "Php" for product "Php" and version "4.0"
beta1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0
Search vendor "Php" for product "Php" and version "4.0"
beta2
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0
Search vendor "Php" for product "Php" and version "4.0"
beta3
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0
Search vendor "Php" for product "Php" and version "4.0"
beta4
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.0
Search vendor "Php" for product "Php" and version "4.0.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.1
Search vendor "Php" for product "Php" and version "4.0.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.2
Search vendor "Php" for product "Php" and version "4.0.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.3
Search vendor "Php" for product "Php" and version "4.0.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.4
Search vendor "Php" for product "Php" and version "4.0.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.5
Search vendor "Php" for product "Php" and version "4.0.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.6
Search vendor "Php" for product "Php" and version "4.0.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.0.7
Search vendor "Php" for product "Php" and version "4.0.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.1.0
Search vendor "Php" for product "Php" and version "4.1.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.1.1
Search vendor "Php" for product "Php" and version "4.1.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.1.2
Search vendor "Php" for product "Php" and version "4.1.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.2.0
Search vendor "Php" for product "Php" and version "4.2.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.2.1
Search vendor "Php" for product "Php" and version "4.2.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.2.2
Search vendor "Php" for product "Php" and version "4.2.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.2.3
Search vendor "Php" for product "Php" and version "4.2.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.0
Search vendor "Php" for product "Php" and version "4.3.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.1
Search vendor "Php" for product "Php" and version "4.3.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.2
Search vendor "Php" for product "Php" and version "4.3.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.3
Search vendor "Php" for product "Php" and version "4.3.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.4
Search vendor "Php" for product "Php" and version "4.3.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.5
Search vendor "Php" for product "Php" and version "4.3.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.6
Search vendor "Php" for product "Php" and version "4.3.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.7
Search vendor "Php" for product "Php" and version "4.3.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.8
Search vendor "Php" for product "Php" and version "4.3.8"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.9
Search vendor "Php" for product "Php" and version "4.3.9"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.10
Search vendor "Php" for product "Php" and version "4.3.10"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.3.11
Search vendor "Php" for product "Php" and version "4.3.11"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.0
Search vendor "Php" for product "Php" and version "4.4.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.1
Search vendor "Php" for product "Php" and version "4.4.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.2
Search vendor "Php" for product "Php" and version "4.4.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.3
Search vendor "Php" for product "Php" and version "4.4.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.4
Search vendor "Php" for product "Php" and version "4.4.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.5
Search vendor "Php" for product "Php" and version "4.4.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.6
Search vendor "Php" for product "Php" and version "4.4.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.7
Search vendor "Php" for product "Php" and version "4.4.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.8
Search vendor "Php" for product "Php" and version "4.4.8"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
4.4.9
Search vendor "Php" for product "Php" and version "4.4.9"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
beta1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
beta2
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
beta3
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
beta4
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
rc1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
rc2
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.0
Search vendor "Php" for product "Php" and version "5.0.0"
rc3
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.1
Search vendor "Php" for product "Php" and version "5.0.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.2
Search vendor "Php" for product "Php" and version "5.0.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.3
Search vendor "Php" for product "Php" and version "5.0.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.4
Search vendor "Php" for product "Php" and version "5.0.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.0.5
Search vendor "Php" for product "Php" and version "5.0.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.0
Search vendor "Php" for product "Php" and version "5.1.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.1
Search vendor "Php" for product "Php" and version "5.1.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.2
Search vendor "Php" for product "Php" and version "5.1.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.3
Search vendor "Php" for product "Php" and version "5.1.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.4
Search vendor "Php" for product "Php" and version "5.1.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.5
Search vendor "Php" for product "Php" and version "5.1.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.1.6
Search vendor "Php" for product "Php" and version "5.1.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.0
Search vendor "Php" for product "Php" and version "5.2.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.1
Search vendor "Php" for product "Php" and version "5.2.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.2
Search vendor "Php" for product "Php" and version "5.2.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.3
Search vendor "Php" for product "Php" and version "5.2.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.4
Search vendor "Php" for product "Php" and version "5.2.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.5
Search vendor "Php" for product "Php" and version "5.2.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.6
Search vendor "Php" for product "Php" and version "5.2.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.7
Search vendor "Php" for product "Php" and version "5.2.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.8
Search vendor "Php" for product "Php" and version "5.2.8"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.9
Search vendor "Php" for product "Php" and version "5.2.9"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.10
Search vendor "Php" for product "Php" and version "5.2.10"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.11
Search vendor "Php" for product "Php" and version "5.2.11"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.12
Search vendor "Php" for product "Php" and version "5.2.12"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.13
Search vendor "Php" for product "Php" and version "5.2.13"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.14
Search vendor "Php" for product "Php" and version "5.2.14"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.15
Search vendor "Php" for product "Php" and version "5.2.15"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.16
Search vendor "Php" for product "Php" and version "5.2.16"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.2.17
Search vendor "Php" for product "Php" and version "5.2.17"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.0
Search vendor "Php" for product "Php" and version "5.3.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.1
Search vendor "Php" for product "Php" and version "5.3.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.2
Search vendor "Php" for product "Php" and version "5.3.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.3
Search vendor "Php" for product "Php" and version "5.3.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.4
Search vendor "Php" for product "Php" and version "5.3.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.5
Search vendor "Php" for product "Php" and version "5.3.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.6
Search vendor "Php" for product "Php" and version "5.3.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.7
Search vendor "Php" for product "Php" and version "5.3.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.8
Search vendor "Php" for product "Php" and version "5.3.8"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.9
Search vendor "Php" for product "Php" and version "5.3.9"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.10
Search vendor "Php" for product "Php" and version "5.3.10"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.3.11
Search vendor "Php" for product "Php" and version "5.3.11"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.0
Search vendor "Php" for product "Php" and version "5.4.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.0
Search vendor "Php" for product "Php" and version "5.4.0"
beta2
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.1
Search vendor "Php" for product "Php" and version "5.4.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.2
Search vendor "Php" for product "Php" and version "5.4.2"
-
Safe