Vulnerabilityhigh
Nasty bug with very simple exploit hits PHP just in time for the weekend
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2012-1823 | PHP-CGI Query String Parsing Flaw Enables Unauthenticated Remote Code Execution | — | 100% | KEV | — KEV |
From the original article
2 min read at arstechnica.com
One example, WatchTowr noted, occurs when queries are parsed and sent through a command line. The result: a harmless request such as http://host/cgi. php?
arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.