CVE-2012-2336
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...
CVE-2012-2336 is a medium vulnerability (CVSS 5.0) in Php, published May 11, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 52.1%, the 98th percentile. Fixed in php 0:5.1.6-39.el5_8.
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
Exploit likelihood
What each source reports
NVD Score used
5.0
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
- Record
CVE-2012-2336- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
- Record
CVE-2012-2336- Updated
- 2026-11-02
EUVDEUVD-2012-2329 No score
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
- Record
EUVD-2012-2329- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gjrg-p28q-p9w2 No score
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script ...
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
- Record
GHSA-gjrg-p28q-p9w2- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVBELL-CVE-2012-2336
5.0
CVE-2012-2336 does not affect BellSoft software
- Record
BELL-CVE-2012-2336- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10290-1 No score
apache2-mod_php7-7.0.14-1.4 on GA media
These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10290-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10344-1 No score
apache2-mod_php5-5.6.28-1.1 on GA media
These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10344-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
Show 184 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
phpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-cliRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-commonRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-dbaRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-develRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-gdRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-imapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-ldapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-ncursesRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-odbcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-pdoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-snmpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-soapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-xmlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
php-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-39.el5_8 | 0:5.1.6-39.el5_8 |
phpRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-bcmathRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-cliRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-commonRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-dbaRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-debuginfoRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-develRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-embeddedRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-enchantRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-gdRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-imapRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-intlRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ldapRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mbstringRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mysqlRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-odbcRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pdoRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pgsqlRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-processRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pspellRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-recodeRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-snmpRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-soapRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-tidyRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlrpcRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ztsRed Hat:enterprise_linux:6::client |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
phpRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-cliRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-commonRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-bcmathRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-dbaRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-develRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-embeddedRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-enchantRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-gdRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-imapRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-intlRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ldapRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mbstringRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mysqlRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-odbcRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pdoRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pgsqlRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-processRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pspellRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-recodeRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-snmpRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-soapRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-tidyRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlrpcRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ztsRed Hat:enterprise_linux:6::computenode |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
phpRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-cliRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-commonRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-debuginfoRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-gdRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ldapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mysqlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-odbcRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pdoRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pgsqlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-soapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlrpcRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-bcmathRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-dbaRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-develRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-embeddedRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-enchantRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-imapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-intlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mbstringRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-processRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pspellRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-recodeRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-snmpRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-tidyRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ztsRed Hat:enterprise_linux:6::server |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
phpRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-cliRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-commonRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-gdRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ldapRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mysqlRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-odbcRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pdoRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pgsqlRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-soapRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-xmlrpcRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-bcmathRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-dbaRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-develRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-embeddedRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-enchantRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-imapRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-intlRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-mbstringRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-processRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-pspellRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-recodeRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-snmpRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-tidyRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php-ztsRed Hat:enterprise_linux:6::workstation |
before 0:5.3.3-14.el6_3 | 0:5.3.3-14.el6_3 |
php53Red Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-intlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-processRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pspellRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53Red Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-cliRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-commonRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-dbaRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-develRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-gdRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-imapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-intlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-ldapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-odbcRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pdoRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-processRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-pspellRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-snmpRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-soapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-xmlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php53-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.3.3-13.el5_8 | 0:5.3.3-13.el5_8 |
php7openSUSE:Tumbleweed |
before 7.0.14-1.4 | 7.0.14-1.4 |
php5openSUSE:Tumbleweed |
before 5.6.28-1.1 | 5.6.28-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHP 5.3.12/5.4.2 - CGI Argument Injection (Metasploit) | 2012-05-04 |
| Exploit-DB | PHP < 5.3.12 / < 5.4.2 - CGI Argument Injection | 2012-05-05 |
| Exploit-DB | Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution | 2013-10-29 |
| Exploit-DB | Apache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution + Scanner | 2013-10-31 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
lists.opensuse.org/opensuse-security-announce/2012-06/msg00004.html
lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html
bugs.php.net/patch-display.php?bug_id=61910&patch=CVE-2012-1823.patch&revision=1336251592&display=1
secunia.com/advisories/49014
bugs.php.net/bug.php?id=61910
php.net/archive/2012.php
Show 120 moreShow less
h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
php.net/ChangeLog-5.php
nvd.nist.gov/vuln/detail/CVE-2012-2336
access.redhat.com/errata/RHSA-2012:1045
access.redhat.com/errata/RHSA-2012:1046
access.redhat.com/errata/RHSA-2012:1047
access.redhat.com/security/cve/CVE-2012-2336
bugzilla.redhat.com/show_bug.cgi?id=820708
github.com/advisories/GHSA-gjrg-p28q-p9w2
docs.bell-sw.com/security/cves/CVE-2012-2336
access.redhat.com/security/updates/classification
rhn.redhat.com/errata/RHSA-2012-0546.html
bugzilla.redhat.com/show_bug.cgi?id=782657
bugzilla.redhat.com/show_bug.cgi?id=782943
bugzilla.redhat.com/show_bug.cgi?id=783609
bugzilla.redhat.com/show_bug.cgi?id=799187
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1045.json
access.redhat.com/security/cve/CVE-2011-4153
cve.org/CVERecord?id=CVE-2011-4153
nvd.nist.gov/vuln/detail/CVE-2011-4153
access.redhat.com/security/cve/CVE-2012-0057
cve.org/CVERecord?id=CVE-2012-0057
nvd.nist.gov/vuln/detail/CVE-2012-0057
access.redhat.com/security/cve/CVE-2012-0789
cve.org/CVERecord?id=CVE-2012-0789
nvd.nist.gov/vuln/detail/CVE-2012-0789
access.redhat.com/security/cve/CVE-2012-1172
cve.org/CVERecord?id=CVE-2012-1172
nvd.nist.gov/vuln/detail/CVE-2012-1172
cve.org/CVERecord?id=CVE-2012-2336
bugzilla.redhat.com/show_bug.cgi?id=782951
bugzilla.redhat.com/show_bug.cgi?id=816956
bugzilla.redhat.com/show_bug.cgi?id=823594
bugzilla.redhat.com/show_bug.cgi?id=835024
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1046.json
access.redhat.com/security/cve/CVE-2010-2950
cve.org/CVERecord?id=CVE-2010-2950
nvd.nist.gov/vuln/detail/CVE-2010-2950
access.redhat.com/security/cve/CVE-2012-0781
cve.org/CVERecord?id=CVE-2012-0781
nvd.nist.gov/vuln/detail/CVE-2012-0781
access.redhat.com/security/cve/CVE-2012-2143
cve.org/CVERecord?id=CVE-2012-2143
nvd.nist.gov/vuln/detail/CVE-2012-2143
access.redhat.com/security/cve/CVE-2012-2386
cve.org/CVERecord?id=CVE-2012-2386
nvd.nist.gov/vuln/detail/CVE-2012-2386
rhn.redhat.com/errata/RHSA-2012-0547.html
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1047.json
suse.com/security/cve/CVE-2006-7243
suse.com/security/cve/CVE-2010-2225
suse.com/security/cve/CVE-2010-2950
suse.com/security/cve/CVE-2010-3436
suse.com/security/cve/CVE-2010-3709
suse.com/security/cve/CVE-2010-3710
suse.com/security/cve/CVE-2010-4150
suse.com/security/cve/CVE-2010-4645
suse.com/security/cve/CVE-2011-0420
suse.com/security/cve/CVE-2011-0421
suse.com/security/cve/CVE-2011-0708
suse.com/security/cve/CVE-2011-1092
suse.com/security/cve/CVE-2011-1153
suse.com/security/cve/CVE-2011-1466
suse.com/security/cve/CVE-2011-2202
suse.com/security/cve/CVE-2011-3379
suse.com/security/cve/CVE-2011-4153
suse.com/security/cve/CVE-2011-4566
suse.com/security/cve/CVE-2011-4718
suse.com/security/cve/CVE-2011-4885
suse.com/security/cve/CVE-2012-0830
suse.com/security/cve/CVE-2012-1823
suse.com/security/cve/CVE-2012-2311
suse.com/security/cve/CVE-2012-2335
suse.com/security/cve/CVE-2012-2336
suse.com/security/cve/CVE-2012-2688
suse.com/security/cve/CVE-2012-3365
suse.com/security/cve/CVE-2013-1635
suse.com/security/cve/CVE-2013-1643
suse.com/security/cve/CVE-2013-1824
suse.com/security/cve/CVE-2013-4113
suse.com/security/cve/CVE-2013-4248
suse.com/security/cve/CVE-2013-6420
suse.com/security/cve/CVE-2013-6712
suse.com/security/cve/CVE-2013-7327
suse.com/security/cve/CVE-2013-7345
suse.com/security/cve/CVE-2014-0185
suse.com/security/cve/CVE-2014-0237
suse.com/security/cve/CVE-2014-0238
suse.com/security/cve/CVE-2014-1943
suse.com/security/cve/CVE-2014-2270
suse.com/security/cve/CVE-2014-2497
suse.com/security/cve/CVE-2014-3538
suse.com/security/cve/CVE-2014-3587
suse.com/security/cve/CVE-2014-3597
suse.com/security/cve/CVE-2014-3622
suse.com/security/cve/CVE-2014-3668
suse.com/security/cve/CVE-2014-3669
suse.com/security/cve/CVE-2014-3670
suse.com/security/cve/CVE-2014-4049
suse.com/security/cve/CVE-2014-4670
suse.com/security/cve/CVE-2014-4698
suse.com/security/cve/CVE-2014-5120
suse.com/security/cve/CVE-2014-5459
suse.com/security/cve/CVE-2014-9426
suse.com/security/cve/CVE-2014-9427
suse.com/security/cve/CVE-2015-0231
suse.com/security/cve/CVE-2015-0232
suse.com/security/cve/CVE-2015-0235
suse.com/security/cve/CVE-2015-0273
suse.com/security/cve/CVE-2015-1351
suse.com/security/cve/CVE-2015-1352
suse.com/security/cve/CVE-2015-2305
suse.com/security/cve/CVE-2015-2325
suse.com/security/cve/CVE-2015-2326
suse.com/security/cve/CVE-2015-2331
suse.com/security/cve/CVE-2015-3152
suse.com/security/cve/CVE-2015-3414
suse.com/security/cve/CVE-2015-3415
suse.com/security/cve/CVE-2015-3416
suse.com/security/cve/CVE-2015-4024