4 ms·
Additionally: The vulnerability can only be exploited if the HTTP server follows a fairly obscure part of the CGI spec. Apache does this, but many other server
by maratd 15y ago
Additionally:
The vulnerability can only be exploited if the HTTP server follows a fairly obscure part of the CGI spec. Apache does this, but many other servers do not.
From: http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/