PHP-CGI vulnerability
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2012-1823 | PHP-CGI Query String Parsing Flaw Enables Unauthenticated Remote Code Execution | — | 100% | KEV | — KEV |
From the original article
1 min read at blog.talosintelligence.com
You've probably heard about the PHP-CGI command-line parameter vulnerability ( CVE-2012-1823 ) released last Thursday, especially if you're defending a PHP-based web application environment. While it makes use of a non-default configuration for exploitation, for users who choose to run PHP through a CGI wrapper, the implications are very important, including potential source code disclosure and remote code execution.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.