https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:52:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-04416 bdu:2021-04416 https://cve.radiocsirt.org/vuln/bdu:2021-04416 https://cve.radiocsirt.org/vuln/certa-2012-avi-246 certa-2012-avi-246 https://cve.radiocsirt.org/vuln/certa-2012-avi-246 https://cve.radiocsirt.org/vuln/euvd-2026-258952 EUVD-2026-258952 https://cve.radiocsirt.org/vuln/euvd-2026-258952 https://cve.radiocsirt.org/vuln/fkie_cve-2012-1823 <p>sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the &#39;d&#39; case.</p> <p>sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the &#39;d&#39; case.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-1823 https://cve.radiocsirt.org/vuln/ghsa-3p37-hv77-x3rp <p>sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the &#39;d&#39; case.</p> <p>sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the &#39;d&#39; case.</p> https://cve.radiocsirt.org/vuln/ghsa-3p37-hv77-x3rp https://cve.radiocsirt.org/vuln/gsd-2012-1823 gsd-2012-1823 https://cve.radiocsirt.org/vuln/gsd-2012-1823 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 https://cve.radiocsirt.org/vuln/rhsa-2012:0546 <p>php: command line arguments injection when run in CGI mode (VU#520827)</p> <p>php: command line arguments injection when run in CGI mode (VU#520827)</p> https://cve.radiocsirt.org/vuln/rhsa-2012:0546