PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct SQL injection attacks via a crafted request, related to main/php_variables.c, sapi/cgi/cgi_main.c, and sapi/fpm/fpm/fpm_main.c.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Note | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Aug 28, 2015 | Feb 10, 2012 |
| Apple Osx Php | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Sep 27, 2012 | Feb 10, 2012 |
| Centos_linux | — | Upgrade php-pdoUpgrade php-xmlUpgrade php-bcmathUpgrade php-develUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-gdUpgrade php-mbstringUpgrade php-fpmUpgrade php-ztsUpgrade php-cliUpgrade php-processUpgrade phpUpgrade php-commonUpgrade php-odbcUpgrade php-soapUpgrade php-enchantUpgrade php-tidyUpgrade php-dbaUpgrade php-imapUpgrade php-pspellUpgrade php-intlUpgrade php-ldapUpgrade php-pgsqlUpgrade php-embeddedUpgrade php-snmp | Dec 1, 2016 | Feb 10, 2012 |
| Freebsd | — | Upgrade php53Upgrade php5 | Dec 10, 2025 | Apr 28, 2012 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Feb 10, 2012 |
| Oracle_linux | — | Upgrade php-soapUpgrade php53-ldapUpgrade php-tidyUpgrade php53-gdUpgrade php53-imapUpgrade php-odbcUpgrade php53-pgsqlUpgrade php-bcmathUpgrade php53-bcmathUpgrade phpUpgrade php53-xmlrpcUpgrade php53-dbaUpgrade php53-mysqlUpgrade php-dbaUpgrade php53-pspellUpgrade php53-odbcUpgrade php-imapUpgrade php-commonUpgrade php53-snmpUpgrade php53-pdoUpgrade php-intlUpgrade php53-processUpgrade php-pgsqlUpgrade php-ldapUpgrade php53-intlUpgrade php53-cliUpgrade php-xmlrpcUpgrade php-snmpUpgrade php-develUpgrade php-gdUpgrade php-mbstringUpgrade php53-soapUpgrade php-xmlUpgrade php-pdoUpgrade php53-mbstringUpgrade php-pspellUpgrade php-cliUpgrade php-recodeUpgrade php53Upgrade php-mysqlUpgrade php53-commonUpgrade php53-develUpgrade php-embeddedUpgrade php-fpmUpgrade php-ztsUpgrade php53-xmlUpgrade php-processUpgrade php-enchant | Oct 16, 2024 | Feb 10, 2012 |
| Php | — | Upgrade to PHP version 5.3.12 | Oct 1, 2012 | Feb 10, 2012 |
| Suse | — | Upgrade php53-zlibUpgrade php53-sysvshmUpgrade php53-xmlreaderUpgrade apache2-mod_php53Upgrade php53-posixUpgrade php53-ctypeUpgrade php53-sysvsemUpgrade php53-gettextUpgrade php53-curlUpgrade php53-opensslUpgrade php53-sysvmsgUpgrade php53-exifUpgrade php53-imapUpgrade php53-pspellUpgrade php53-xslUpgrade php53-xmlrpcUpgrade php53-iconvUpgrade php53-socketsUpgrade php53-readlineUpgrade php53-snmpUpgrade php53-pdoUpgrade php53-tokenizerUpgrade php53-soapUpgrade php53-suhosinUpgrade php53-xmlwriterUpgrade php53Upgrade php53-fileinfoUpgrade php53-intlUpgrade php53-gdUpgrade php53-zipUpgrade php53-pcntlUpgrade php53-sqliteUpgrade php53-mbstringUpgrade php53-pgsqlUpgrade php53-mysqlUpgrade php53-shmopUpgrade php53-develUpgrade php53-pearUpgrade php53-mcryptUpgrade php53-bcmathUpgrade php53-gmpUpgrade php53-fastcgiUpgrade php53-wddxUpgrade php53-ldapUpgrade php53-odbcUpgrade php53-dbaUpgrade php53-jsonUpgrade php53-tidyUpgrade php53-ftpUpgrade php53-domUpgrade php53-bz2Upgrade php53-calendar | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5Upgrade php5-cliUpgrade php5-cgiUpgrade php5-commonUpgrade libapache2-mod-php5Upgrade php5-xsl | Nov 8, 2024 | Feb 10, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub