PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct SQL injection attacks via a crafted request, related to main/php_variables.c, sapi/cgi/cgi_main.c, and sapi/fpm/fpm/fpm_main.c.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Note | — | Apply OS X security update 2012-004Upgrade macOS to the latest version | Aug 28, 2015 | Feb 10, 2012 |
| Apple Osx Php | — | Apply OS X security update 2012-004Upgrade macOS to the latest version | Sep 27, 2012 | Feb 10, 2012 |
| Centos_linux | — | Upgrade php-pdoUpgrade php-recodeUpgrade php-xmlUpgrade php-bcmathUpgrade php-processUpgrade php-cliUpgrade php-ztsUpgrade php-gdUpgrade php-mysqlUpgrade php-develUpgrade php-fpmUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-commonUpgrade php-dbaUpgrade php-snmpUpgrade phpUpgrade php-pgsqlUpgrade php-soapUpgrade php-odbcUpgrade php-embeddedUpgrade php-ldapUpgrade php-intlUpgrade php-imapUpgrade php-enchantUpgrade php-pspellUpgrade php-tidy | Dec 1, 2016 | Feb 10, 2012 |
| Freebsd | — | Upgrade php53Upgrade php5 | Dec 10, 2025 | Apr 28, 2012 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Feb 10, 2012 |
| Oracle_linux | — | Upgrade php-develUpgrade php-gdUpgrade php53Upgrade php-recodeUpgrade php53-mbstringUpgrade php-processUpgrade php-mbstringUpgrade php53-develUpgrade php-cliUpgrade php53-soapUpgrade php-fpmUpgrade php-embeddedUpgrade php-mysqlUpgrade php-ztsUpgrade php53-commonUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-pspellUpgrade php-snmpUpgrade php-enchantUpgrade php53-xmlUpgrade php-bcmathUpgrade php-intlUpgrade php53-dbaUpgrade php-odbcUpgrade phpUpgrade php53-gdUpgrade php-dbaUpgrade php53-intlUpgrade php53-snmpUpgrade php-pgsqlUpgrade php53-processUpgrade php53-ldapUpgrade php53-pgsqlUpgrade php53-pspellUpgrade php53-bcmathUpgrade php-tidyUpgrade php-soapUpgrade php-commonUpgrade php53-odbcUpgrade php-ldapUpgrade php53-mysqlUpgrade php53-cliUpgrade php53-imapUpgrade php53-xmlrpcUpgrade php-imapUpgrade php53-pdo | Oct 16, 2024 | Feb 10, 2012 |
| Php | — | Upgrade to PHP version 5.3.12 | Oct 1, 2012 | Feb 10, 2012 |
| Suse | — | Upgrade php53-ldapUpgrade php53-shmopUpgrade php53-bz2Upgrade php53-odbcUpgrade php53-mbstringUpgrade php53-develUpgrade php53-gmpUpgrade php53-dbaUpgrade php53-ftpUpgrade php53-mcryptUpgrade php53-jsonUpgrade php53-bcmathUpgrade php53-fastcgiUpgrade php53-pearUpgrade php53-domUpgrade php53-sqliteUpgrade php53-mysqlUpgrade php53-calendarUpgrade php53-wddxUpgrade php53-tidyUpgrade php53-pgsqlUpgrade php53-xmlreaderUpgrade php53-gettextUpgrade php53-sysvshmUpgrade php53-sysvsemUpgrade php53-posixUpgrade apache2-mod_php53Upgrade php53-suhosinUpgrade php53-exifUpgrade php53-intlUpgrade php53-snmpUpgrade php53-zipUpgrade php53-curlUpgrade php53-pcntlUpgrade php53-sysvmsgUpgrade php53-xmlrpcUpgrade php53Upgrade php53-pspellUpgrade php53-xmlwriterUpgrade php53-imapUpgrade php53-opensslUpgrade php53-iconvUpgrade php53-xslUpgrade php53-fileinfoUpgrade php53-ctypeUpgrade php53-soapUpgrade php53-socketsUpgrade php53-readlineUpgrade php53-zlibUpgrade php53-pdoUpgrade php53-tokenizerUpgrade php53-gd | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php5-xslUpgrade php5-commonUpgrade php5-cliUpgrade php5-cgiUpgrade php5 | Nov 8, 2024 | Feb 10, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub