Critical 1 exploited CVE DSA-2465-1 3 CVEs

php5 - several

Published May 9, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	php5	5.3.3-7+squeeze9

Vulnerabilities 3

Critical 9.8

CVE-2012-1823 Exploited Public exploit Scanner template EPSS 100%

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does no…

May 11, 2012
KEV Mar 25, 2022
Unscored —

CVE-2012-1172

The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket…

May 24, 2012
Unscored —

CVE-2012-2311 Public exploit EPSS 69%

sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does no…

May 11, 2012