Every CVESearch/Get API key

CVE-2012-1172

The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid ...

5.8 Medium

CVE-2012-1172 is a medium vulnerability (CVSS 5.8) in Php, published May 9, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.19%, the 93rd percentile. No source names a fixed version.

Severity
5.8 MediumCVSS 2.0, NVD
Exploit chance
6.19%EPSS, 93rd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.

Exploit likelihood

6.19%Up 1.8 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php5
Debian:6.0
From an advisory covering 3 CVEs
before 5.3.3-7+squeeze9, plus listed versions
5.3.3-75.3.3-7+squeeze15.3.3-7+squeeze25.3.3-7+squeeze35.3.3-7+squeeze55.3.3-7+squeeze65.3.3-7+squeeze75.3.3-7+squeeze8
5.3.3-7+squeeze9
php
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-bcmath
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-cli
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-common
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-dba
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-gd
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-imap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
Show 183 moreShow less
Affected packages
PackageAffectedFixed
php-ldap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-mbstring
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-mysql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-ncurses
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-odbc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-pdo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-pgsql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-snmp
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-soap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-xml
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-xmlrpc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-bcmath
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-cli
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-common
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-dba
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-gd
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-imap
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-ldap
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-mbstring
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-mysql
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-ncurses
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-odbc
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-pdo
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-pgsql
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-snmp
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-soap
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-xml
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php-xmlrpc
Red Hat:enterprise_linux:5::server
From an advisory covering 5 CVEs
before 0:5.1.6-39.el5_8
0:5.1.6-39.el5_8
php
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-bcmath
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-cli
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-common
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-dba
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-embedded
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-enchant
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-gd
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-imap
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-intl
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-ldap
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mbstring
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mysql
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-odbc
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pdo
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pgsql
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-process
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pspell
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-recode
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-snmp
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-soap
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-tidy
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xml
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xmlrpc
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-zts
Red Hat:enterprise_linux:6::client
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-cli
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-bcmath
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-dba
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-embedded
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-enchant
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-gd
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-imap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-intl
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-ldap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mbstring
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mysql
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-odbc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pdo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pgsql
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-process
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pspell
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-recode
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-snmp
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-soap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-tidy
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xml
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xmlrpc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-zts
Red Hat:enterprise_linux:6::computenode
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-cli
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-common
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-gd
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-ldap
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mysql
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-odbc
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pdo
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pgsql
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-soap
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xml
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xmlrpc
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-bcmath
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-dba
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-embedded
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-enchant
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-imap
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-intl
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mbstring
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-process
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pspell
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-recode
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-snmp
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-tidy
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-zts
Red Hat:enterprise_linux:6::server
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-cli
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-gd
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-ldap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mysql
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-odbc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pdo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pgsql
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-soap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xml
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-xmlrpc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-bcmath
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-dba
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-embedded
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-enchant
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-imap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-intl
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-mbstring
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-process
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-pspell
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-recode
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-snmp
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-tidy
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php-zts
Red Hat:enterprise_linux:6::workstation
From an advisory covering 9 CVEs
before 0:5.3.3-14.el6_3
0:5.3.3-14.el6_3
php53
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-bcmath
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-cli
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-common
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-dba
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-gd
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-imap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-intl
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-ldap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-mbstring
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-mysql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-odbc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-pdo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-pgsql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-process
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-pspell
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-snmp
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-soap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-xml
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-xmlrpc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-bcmath
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-cli
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-common
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-dba
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-gd
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-imap
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-intl
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-ldap
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-mbstring
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-mysql
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-odbc
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-pdo
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-pgsql
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-process
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-pspell
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-snmp
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-soap
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-xml
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8
php53-xmlrpc
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:5.3.3-13.el5_8
0:5.3.3-13.el5_8

What each source reports

NVD Score used5.8

The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.

Record
CVE-2012-1172
CVSS 2.0
5.8 MediumAV:N/AC:M/Au:N/C:N/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.

Record
CVE-2012-1172
Updated
2026-11-02
EUVDEUVD-2012-1202No score

The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.

Record
EUVD-2012-1202
Updated
2026-11-03
GitHub AdvisoriesGHSA-jpm9-86g2-j2gxNo score

The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid ...

The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions.

Record
GHSA-jpm9-86g2-j2gx
Weakness
CWE-20
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 60 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open