https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:12:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02625 bdu:2022-02625 https://cve.radiocsirt.org/vuln/bdu:2022-02625 https://cve.radiocsirt.org/vuln/bell-cve-2012-2311 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2012-2311 https://cve.radiocsirt.org/vuln/certa-2012-avi-267 certa-2012-avi-267 https://cve.radiocsirt.org/vuln/certa-2012-avi-267 https://cve.radiocsirt.org/vuln/euvd-2026-111040 EUVD-2026-111040 https://cve.radiocsirt.org/vuln/euvd-2026-111040 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2311 <p>sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the &#39;d&#39; case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.</p> <p>sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the &#39;d&#39; case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-2311 https://cve.radiocsirt.org/vuln/ghsa-9c8w-rvgj-w489 <p>sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the &#39;d&#39; case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.</p> <p>sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the &#39;d&#39; case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.</p> https://cve.radiocsirt.org/vuln/ghsa-9c8w-rvgj-w489 https://cve.radiocsirt.org/vuln/gsd-2012-2311 gsd-2012-2311 https://cve.radiocsirt.org/vuln/gsd-2012-2311 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1