CVE-2012-2335 in PHP

Sumário (Inglês)

php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3.12 and 5.4.2 and execute arbitrary code by leveraging improper interaction between the PHP sapi/cgi/cgi_main.c component and a query string beginning with a +- sequence.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

19/04/2012

Divulgação

11/05/2012

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
60731	PHP Wrapper Elevação de Privilégios	264	Não definido	Não definido	CVE-2012-2335

Fontes

• MITRE
• NVD
• CVE Details