CVE-2012-1823 PHP PHP
sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.
- CVSS
- not scored
On CISA’s exploited list
PHP-CGI Query String Parameter Vulnerability
- Added
- 2022-03-25
- Federal patch deadline
- 2022-04-15
- Ransomware use
- not known