PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct SQL injection attacks via a crafted request, related to main/php_variables.c, sapi/cgi/cgi_main.c, and sapi/fpm/fpm/fpm_main.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Note | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Aug 28, 2015 | Feb 10, 2012 |
| Apple Osx Php | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Sep 27, 2012 | Feb 10, 2012 |
| Centos_linux | — | Upgrade php-snmpUpgrade php-soapUpgrade php-enchantUpgrade php-pgsqlUpgrade php-commonUpgrade php-imapUpgrade php-odbcUpgrade php-embeddedUpgrade php-intlUpgrade php-dbaUpgrade php-ldapUpgrade php-pspellUpgrade phpUpgrade php-tidyUpgrade php-xmlUpgrade php-mbstringUpgrade php-processUpgrade php-bcmathUpgrade php-mysqlUpgrade php-ztsUpgrade php-cliUpgrade php-pdoUpgrade php-develUpgrade php-gdUpgrade php-recodeUpgrade php-fpmUpgrade php-xmlrpc | Dec 1, 2016 | Feb 10, 2012 |
| Freebsd | — | Upgrade php5Upgrade php53 | Dec 10, 2025 | Apr 28, 2012 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Feb 10, 2012 |
| Oracle_linux | — | Upgrade php-fpmUpgrade php-gdUpgrade php-mbstringUpgrade php53-develUpgrade php-enchantUpgrade php-mysqlUpgrade php53-commonUpgrade php-ztsUpgrade php-snmpUpgrade php-embeddedUpgrade php-cliUpgrade php-pdoUpgrade php53-xmlUpgrade php53-mbstringUpgrade php53Upgrade php-develUpgrade php-xmlUpgrade php-processUpgrade php53-soapUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-pspellUpgrade php-soapUpgrade php-odbcUpgrade php53-intlUpgrade php-bcmathUpgrade php53-ldapUpgrade php-ldapUpgrade php53-dbaUpgrade php-tidyUpgrade php53-snmpUpgrade php-pgsqlUpgrade php-commonUpgrade php53-bcmathUpgrade php-imapUpgrade php53-pspellUpgrade php53-pdoUpgrade php53-imapUpgrade php-intlUpgrade php53-odbcUpgrade php53-xmlrpcUpgrade phpUpgrade php53-mysqlUpgrade php53-cliUpgrade php53-processUpgrade php53-pgsqlUpgrade php53-gdUpgrade php-dba | Oct 16, 2024 | Feb 10, 2012 |
| Php | — | Upgrade to PHP version 5.3.12 | Oct 1, 2012 | Feb 10, 2012 |
| Suse | — | Upgrade php53-pcntlUpgrade apache2-mod_php53Upgrade php53-curlUpgrade php53-fileinfoUpgrade php53-opensslUpgrade php53Upgrade php53-iconvUpgrade php53-pdoUpgrade php53-sysvsemUpgrade php53-pspellUpgrade php53-readlineUpgrade php53-xmlwriterUpgrade php53-sysvshmUpgrade php53-imapUpgrade php53-suhosinUpgrade php53-tokenizerUpgrade php53-zlibUpgrade php53-snmpUpgrade php53-intlUpgrade php53-zipUpgrade php53-ctypeUpgrade php53-sysvmsgUpgrade php53-exifUpgrade php53-soapUpgrade php53-gettextUpgrade php53-socketsUpgrade php53-posixUpgrade php53-xmlrpcUpgrade php53-xslUpgrade php53-gdUpgrade php53-xmlreaderUpgrade php53-bz2Upgrade php53-gmpUpgrade php53-calendarUpgrade php53-pearUpgrade php53-odbcUpgrade php53-domUpgrade php53-mysqlUpgrade php53-pgsqlUpgrade php53-jsonUpgrade php53-fastcgiUpgrade php53-mcryptUpgrade php53-ldapUpgrade php53-wddxUpgrade php53-ftpUpgrade php53-dbaUpgrade php53-sqliteUpgrade php53-tidyUpgrade php53-develUpgrade php53-bcmathUpgrade php53-mbstringUpgrade php53-shmop | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-commonUpgrade php5-cgiUpgrade php5-xslUpgrade php5-cliUpgrade libapache2-mod-php5Upgrade php5 | Nov 8, 2024 | Feb 10, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub