CVE-2012-1823 — PHP security advisory

CVE-2012-1823: sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.

Risk and impact

The vulnerability allows remote attackers to execute arbitrary code by placing command-line options in the query string, which can lead to unauthorized access, data manipulation, or system compromise.

Recommended action

Apply updates per vendor instructions. Ensure that affected versions are updated to at least 5.4.2 or later.