CVE-2012-1823: PHP-CGI Query String Parameter Vulnerability.
PHP-CGI Query String Parameter Vulnerability. sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.
- CISA KEV-listed (remediation due 2022-04-15)
- EPSS 94.4% (100.0% percentile)