NVD

Id
42900  
Name
CVE-2012-0831  
Description
PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct SQL injection attacks via a crafted request, related to main/php_variables.c, sapi/cgi/cgi_main.c, and sapi/fpm/fpm/fpm_main.c.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-02-10  
Modified Date
2013-10-10  
Seq
2012-0831  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
215883 42900 CVE-2012-0831 APPLE-SA-2012-09-19-2  View
215884 42900 CVE-2012-0831 FEDORA-2012-6911  View
215885 42900 CVE-2012-0831 FEDORA-2012-6907  View
215886 42900 CVE-2012-0831 openSUSE-SU-2012:0426  View
215887 42900 CVE-2012-0831 RHSA-2013:1307  View
215888 42900 CVE-2012-0831 http://support.apple.com/kb/HT5501  View
215889 42900 CVE-2012-0831 http://svn.php.net/viewvc?view=revision&revision=323016  View
215890 42900 CVE-2012-0831 51954  View
215891 42900 CVE-2012-0831 USN-1358-1  View
215892 42900 CVE-2012-0831 php-magicquotesgpc-sec-bypass(73125)  View
215893 42900 CVE-2012-0831 https://launchpadlibrarian.net/92454212/php5_5.3.2-1ubuntu4.13.diff.gz  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25681 JVNDB-2012-001388 PHP における SQL インジェクション攻撃を行われる脆弱性 PHP は、環境変数のインポート中の magic_quotes_gpc ディレクティブへの一時的変更を適切に処理しないため、容易に SQL インジェクション攻撃を行われる脆弱性が存在します。 CVE-2012-0831 54069 CVE-2012-0831 42900 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001388.html 2012-02-10 2013-12-02 View