Description

The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.

Remediation

References

CVE-2012-0830

Related Vulnerabilities

WordPress Plugin WP RSS Aggregator-News Feeds, Autoblogging, Youtube Video Feeds and More Unspecified Vulnerability (4.8.2)

Oracle JRE CVE-2018-2796 Vulnerability (CVE-2018-2796)

PHP Improper Access Control Vulnerability (CVE-2016-5385)

Apache Tomcat Improper Authentication Vulnerability (CVE-2011-5063)

WordPress Plugin Check & Log Email Cross-Site Scripting (1.0.3)

Severity

High

Classification

CVE-2012-0830

Tags

Missing Update Known Vulnerabilities