PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct SQL injection attacks via a crafted request, related to main/php_variables.c, sapi/cgi/cgi_main.c, and sapi/fpm/fpm/fpm_main.c.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Note | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Aug 28, 2015 | Feb 10, 2012 |
| Apple Osx Php | — | Apply OS X security update 2012-004Upgrade macOS to the latest version | Sep 27, 2012 | Feb 10, 2012 |
| Centos_linux | — | Upgrade php-snmpUpgrade php-dbaUpgrade php-ldapUpgrade php-embeddedUpgrade phpUpgrade php-enchantUpgrade php-soapUpgrade php-odbcUpgrade php-pgsqlUpgrade php-intlUpgrade php-pspellUpgrade php-commonUpgrade php-imapUpgrade php-tidyUpgrade php-cliUpgrade php-bcmathUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-develUpgrade php-xmlUpgrade php-pdoUpgrade php-processUpgrade php-ztsUpgrade php-recodeUpgrade php-fpmUpgrade php-gdUpgrade php-mysql | Dec 1, 2016 | Feb 10, 2012 |
| Freebsd | — | Upgrade php53Upgrade php5 | Dec 10, 2025 | Apr 28, 2012 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Feb 10, 2012 |
| Oracle_linux | — | Upgrade php53-bcmathUpgrade php53-gdUpgrade php53-snmpUpgrade php-ldapUpgrade php-imapUpgrade phpUpgrade php53-pdoUpgrade php53-pgsqlUpgrade php-odbcUpgrade php-tidyUpgrade php53-pspellUpgrade php53-odbcUpgrade php-dbaUpgrade php-intlUpgrade php53-intlUpgrade php53-ldapUpgrade php53-processUpgrade php-soapUpgrade php-commonUpgrade php-bcmathUpgrade php53-dbaUpgrade php-pgsqlUpgrade php53-imapUpgrade php53-cliUpgrade php53-mysqlUpgrade php53-xmlrpcUpgrade php-cliUpgrade php-ztsUpgrade php-fpmUpgrade php-embeddedUpgrade php-xmlrpcUpgrade php-xmlUpgrade php53Upgrade php-gdUpgrade php53-soapUpgrade php53-mbstringUpgrade php-snmpUpgrade php-pdoUpgrade php53-commonUpgrade php-pspellUpgrade php53-xmlUpgrade php-processUpgrade php-recodeUpgrade php-mysqlUpgrade php-mbstringUpgrade php-enchantUpgrade php53-develUpgrade php-devel | Oct 16, 2024 | Feb 10, 2012 |
| Php | — | Upgrade to PHP version 5.3.12 | Oct 1, 2012 | Feb 10, 2012 |
| Suse | — | Upgrade php53-pgsqlUpgrade php53-wddxUpgrade php53-mcryptUpgrade php53-bz2Upgrade php53-fastcgiUpgrade php53-sqliteUpgrade php53-mysqlUpgrade php53-gmpUpgrade php53-tidyUpgrade php53-domUpgrade php53-dbaUpgrade php53-shmopUpgrade php53-develUpgrade php53-jsonUpgrade php53-odbcUpgrade php53-ftpUpgrade php53-bcmathUpgrade php53-ldapUpgrade php53-mbstringUpgrade php53-calendarUpgrade php53-pearUpgrade php53-curlUpgrade php53-soapUpgrade php53-gdUpgrade php53-snmpUpgrade php53-intlUpgrade php53-pcntlUpgrade php53-zipUpgrade php53-ctypeUpgrade php53-socketsUpgrade php53-iconvUpgrade php53-xmlwriterUpgrade php53-exifUpgrade php53-xslUpgrade php53-sysvshmUpgrade php53-readlineUpgrade php53-sysvsemUpgrade php53-posixUpgrade php53-suhosinUpgrade php53-pdoUpgrade php53-fileinfoUpgrade apache2-mod_php53Upgrade php53-xmlreaderUpgrade php53-xmlrpcUpgrade php53-zlibUpgrade php53-opensslUpgrade php53Upgrade php53-imapUpgrade php53-sysvmsgUpgrade php53-gettextUpgrade php53-pspellUpgrade php53-tokenizer | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5Upgrade php5-cliUpgrade php5-xslUpgrade php5-cgiUpgrade php5-commonUpgrade libapache2-mod-php5 | Nov 8, 2024 | Feb 10, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub