Exploit for Open-Worldwide-Application-Security-Project-OWASP

CVE-2012-1823

kitploit · 2026-08-25

Description

OWASP ZAP automated assessment of DVWA identifies RCE CVE-2012-1823 and critical security flaws.

Entry point

Parameterquery_string · path

Path/cgi-bin/php

PHP CGI remote code execution via crafted query string in CGI (CVE-2012-1823) when php-cgi is used under Apache. Attack described in the document relies on CGI getopt handling of command-line options to bypass security checks.

Affected Php versions

Php< 5.3.12, 5.4.2

All known vulnerabilities by product

Centos Hp-Ux Php Red Hat Suse

CVSS 9.8 for CVE-2012-1823

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Exploit Details

Modified:2026-08-25 10:01

Last Seen:2026-08-26 03:04

Reporter:KitPloit

Other exploits for CVE-2012-1823

CVE-2012-1823

2026-08-29 KitPloitKITPLOIT

PHP_CVE-2012-1823

2026-08-29 KitPloitKITPLOIT

CVE-2012-1823-exploit-for-https-user-password-web

2026-08-28 KitPloitKITPLOIT

CVE-2012-1823

2026-08-28 KitPloitKITPLOIT

CVE-2012-1823---PHP-CGI---RCE

2026-08-28 KitPloitKITPLOIT

CVE-2012-1823-Analyze

2026-08-28 KitPloitKITPLOIT

CVE-2012-1823

2026-08-28 KitPloitKITPLOIT

Vulnerability-Assessment-and-OSINT-CVE-2012-1823

2026-08-28 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-WABURIG-OPEN-WORLDWIDE-APPLICATION-SECURITY-PROJECT-OWASP-
# Открытый-Всемирный-Проект-Безопасности-Приложений-OWASP-

Автоматизированная оценка уязвимостей веб-приложений DVWA с помощью OWASP ZAP для выявления и анализа критических недостатков безопасности, таких как удаленное выполнение кода (CVE-2012-1823).

Exploit Code

Share

Share on social media: