Veille CVE

Semaine du 7 mai au 13 mai 2012

1 CVE sur 1

Critique 1 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2012-1823 9.8 Critique Exploitée

    Php php · Fedoraproject fedora · Debian debian linux · Hp hp-ux

    sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.