CVE-2012-0831: Input Validation
PHP before 5.3.10 does not properly perform a temporary change to the magicquotesgpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct SQL injection attacks via a crafted request, related to main/phpvariables.c, sapi/cgi/cgimain.c, and sapi/fpm/fpm/fpmmain.c.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0831?
CVE-2012-0831 is classified as a moderate severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2012-0831?
To mitigate CVE-2012-0831, upgrade your PHP version to 5.3.10 or later.
What types of attacks can occur due to CVE-2012-0831?
CVE-2012-0831 can facilitate remote attackers in conducting SQL injection attacks.
Which PHP versions are vulnerable to CVE-2012-0831?
Any PHP version prior to 5.3.10 is vulnerable to CVE-2012-0831.
What is the impact of CVE-2012-0831 on web applications?
The impact of CVE-2012-0831 on web applications includes potential unauthorized access to databases and manipulation of data.