CVE-2012-0831

Published: Feb 10, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct SQL injection attacks via a crafted request, related to main/php_variables.c, sapi/cgi/cgi_main.c, and sapi/fpm/fpm/fpm_main.c.

Affected (1)

Products: Php: Php

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Php Php	Up to 5.3.10

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (30)

http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080037.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080041.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00001.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1307.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/48668

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/55078

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT5501

Source: secalert@redhat.com

Third Party Advisory

http://svn.php.net/viewvc?view=revision&revision=323016

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/bid/51954

Source: secalert@redhat.com

PatchThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1358-1

Source: secalert@redhat.com

PatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/73125

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://launchpadlibrarian.net/92454212/php5_5.3.2-1ubuntu4.13.diff.gz

Source: secalert@redhat.com

ExploitThird Party Advisory

http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080037.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080041.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1307.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/48668

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/55078

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://support.apple.com/kb/HT5501

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://svn.php.net/viewvc?view=revision&revision=323016

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/51954

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1358-1

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/73125

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://launchpadlibrarian.net/92454212/php5_5.3.2-1ubuntu4.13.diff.gz

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.