CVE-2012-1172
The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid ...
CVE-2012-1172 is a medium vulnerability (CVSS 5.8) in Php, published May 9, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.19%, the 93rd percentile. Fixed in php5 5.3.3-7+squeeze9.
The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.
Exploit likelihood
What each source reports
NVD Score used
5.8
The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.
- Record
CVE-2012-1172- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.
- Record
CVE-2012-1172- Updated
- 2026-11-02
EUVDEUVD-2012-1202 No score
The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.
- Record
EUVD-2012-1202- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jpm9-86g2-j2gx No score
The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid ...
The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.
- Record
GHSA-jpm9-86g2-j2gx- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:6.0 |
before 5.3.3-7+squeeze9, plus listed versions 5.3.3-75.3.3-7+squeeze15.3.3-7+squeeze25.3.3-7+squeeze35.3.3-7+squeeze55.3.3-7+squeeze65.3.3-7+squeeze75.3.3-7+squeeze8 |
5.3.3-7+squeeze9 |
phpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
Show 183 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
phpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-cliRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-commonRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-dbaRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-develRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-gdRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-imapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-ldapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-ncursesRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-odbcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-pdoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-snmpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-soapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-xmlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
phpRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-bcmathRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-cliRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-commonRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-dbaRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-debuginfoRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-develRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-embeddedRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-enchantRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-gdRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-imapRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-intlRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ldapRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mbstringRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mysqlRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-odbcRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pdoRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pgsqlRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-processRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pspellRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-recodeRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-snmpRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-soapRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-tidyRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlrpcRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ztsRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
phpRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-cliRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-commonRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-bcmathRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-dbaRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-develRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-embeddedRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-enchantRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-gdRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-imapRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-intlRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ldapRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mbstringRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mysqlRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-odbcRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pdoRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pgsqlRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-processRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pspellRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-recodeRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-snmpRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-soapRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-tidyRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlrpcRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ztsRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
phpRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-cliRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-commonRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-debuginfoRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-gdRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ldapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mysqlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-odbcRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pdoRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pgsqlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-soapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlrpcRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-bcmathRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-dbaRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-develRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-embeddedRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-enchantRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-imapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-intlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mbstringRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-processRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pspellRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-recodeRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-snmpRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-tidyRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ztsRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
phpRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-cliRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-commonRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-gdRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ldapRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mysqlRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-odbcRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pdoRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pgsqlRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-soapRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlrpcRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-bcmathRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-dbaRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-develRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-embeddedRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-enchantRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-imapRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-intlRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mbstringRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-processRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pspellRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-recodeRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-snmpRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-tidyRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ztsRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php53Red Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-intlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-processRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pspellRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53Red Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-cliRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-commonRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-dbaRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-develRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-gdRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-imapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-intlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-ldapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-odbcRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pdoRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-processRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pspellRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-snmpRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-soapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-xmlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
marc.info?l=bugtraq&m=134012830914727&w=2
svn.php.net/viewvc/php/php-src/branches/PHP_5_4/main/rfc1867.c?r1=321664&r2=321663&pathrev=321664
lists.fedoraproject.org/pipermail/package-announce/2012-May/080070.html
bugs.php.net/bug.php?id=54374
lists.opensuse.org/opensuse-security-announce/2012-05/msg00011.html
bugs.php.net/bug.php?id=49683
Show 60 moreShow less
nealpoole.com/blog/2011/10/directory-traversal-via-php-multi-file-uploads
svn.php.net/viewvc?view=revision&revision=321664
openwall.com/lists/oss-security/2012/03/13/4
bugs.php.net/bug.php?id=48597
lists.opensuse.org/opensuse-security-announce/2012-05/msg00007.html
isisblogs.poly.edu/2011/08/11/php-not-properly-checking-params
lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
support.apple.com/kb/HT5501
students.mimuw.edu.pl/~ai292615/php_multipleupload_overwrite.pdf
php.net/ChangeLog-5.php
lists.fedoraproject.org/pipermail/package-announce/2012-May/080041.html
debian.org/security/2012/dsa-2465
lists.fedoraproject.org/pipermail/package-announce/2012-May/080037.html
bugs.php.net/bug.php?id=55500
nvd.nist.gov/vuln/detail/CVE-2012-1172
github.com/advisories/GHSA-jpm9-86g2-j2gx
access.redhat.com/errata/RHSA-2012:1045
access.redhat.com/security/updates/classification
rhn.redhat.com/errata/RHSA-2012-0546.html
bugzilla.redhat.com/show_bug.cgi?id=782657
bugzilla.redhat.com/show_bug.cgi?id=782943
bugzilla.redhat.com/show_bug.cgi?id=783609
bugzilla.redhat.com/show_bug.cgi?id=799187
bugzilla.redhat.com/show_bug.cgi?id=820708
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1045.json
access.redhat.com/security/cve/CVE-2011-4153
cve.org/CVERecord?id=CVE-2011-4153
nvd.nist.gov/vuln/detail/CVE-2011-4153
access.redhat.com/security/cve/CVE-2012-0057
cve.org/CVERecord?id=CVE-2012-0057
nvd.nist.gov/vuln/detail/CVE-2012-0057
access.redhat.com/security/cve/CVE-2012-0789
cve.org/CVERecord?id=CVE-2012-0789
nvd.nist.gov/vuln/detail/CVE-2012-0789
access.redhat.com/security/cve/CVE-2012-1172
cve.org/CVERecord?id=CVE-2012-1172
access.redhat.com/security/cve/CVE-2012-2336
cve.org/CVERecord?id=CVE-2012-2336
nvd.nist.gov/vuln/detail/CVE-2012-2336
access.redhat.com/errata/RHSA-2012:1046
bugzilla.redhat.com/show_bug.cgi?id=782951
bugzilla.redhat.com/show_bug.cgi?id=816956
bugzilla.redhat.com/show_bug.cgi?id=823594
bugzilla.redhat.com/show_bug.cgi?id=835024
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1046.json
access.redhat.com/security/cve/CVE-2010-2950
cve.org/CVERecord?id=CVE-2010-2950
nvd.nist.gov/vuln/detail/CVE-2010-2950
access.redhat.com/security/cve/CVE-2012-0781
cve.org/CVERecord?id=CVE-2012-0781
nvd.nist.gov/vuln/detail/CVE-2012-0781
access.redhat.com/security/cve/CVE-2012-2143
cve.org/CVERecord?id=CVE-2012-2143
nvd.nist.gov/vuln/detail/CVE-2012-2143
access.redhat.com/security/cve/CVE-2012-2386
cve.org/CVERecord?id=CVE-2012-2386
nvd.nist.gov/vuln/detail/CVE-2012-2386
access.redhat.com/errata/RHSA-2012:1047
rhn.redhat.com/errata/RHSA-2012-0547.html
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1047.json