A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2012-1823

PHP-CGI Query String Parameter Vulnerability

Published
2022-03-25
Modified
2026-07-31
Sources
cisa-kev

Summary

sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.