Known Exploited Vulnerabilities March 25, 2022 · CISA KEV Catalog

CVE-2012-1823: PHP-CGI Query String Parameter Vulnerability

sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2012-1823 PHP
Related: CVE-2016-10033: PHPMailer Command Injection Vulnerability Known Exploited Vulnerabilities · Jul 07, 2025
CVE-2019-11043: PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026