CVE-2012-2751

ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data Content-Type header, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-5031.

• http://blog.ivanristic.com/2012/06/modsecurity-and-modsecurity-core-rule-set-multipart-bypasses.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.htmlMailing List, Third Party Advisory
• http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/branches/2.6.x/CHANGESBroken Link
• http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/trunk/CHANGES?r1=1920&r2=1919&pathrev=1920Broken Link
• http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/trunk/apache2/msc_multipart.c?r1=1918&r2=1917&pathrev=1918Broken Link
• http://secunia.com/advisories/49576Third Party Advisory
• http://secunia.com/advisories/49782Third Party Advisory
• http://www.debian.org/security/2012/dsa-2506Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:118Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/06/22/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/06/22/2Mailing List, Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.htmlThird Party Advisory
• http://www.securityfocus.com/bid/54156Third Party Advisory, VDB Entry
• http://blog.ivanristic.com/2012/06/modsecurity-and-modsecurity-core-rule-set-multipart-bypasses.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.htmlMailing List, Third Party Advisory
• http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/branches/2.6.x/CHANGESBroken Link
• http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/trunk/CHANGES?r1=1920&r2=1919&pathrev=1920Broken Link
• http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/trunk/apache2/msc_multipart.c?r1=1918&r2=1917&pathrev=1918Broken Link
• http://secunia.com/advisories/49576Third Party Advisory
• http://secunia.com/advisories/49782Third Party Advisory
• http://www.debian.org/security/2012/dsa-2506Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:118Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/06/22/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/06/22/2Mailing List, Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.htmlThird Party Advisory
• http://www.securityfocus.com/bid/54156Third Party Advisory, VDB Entry

Published

Jul 22, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2745The copy_creds function in kernel/cred.c in the Linux kernel…
• CVE-2012-2746389 Directory Server before 1.2.11.6 (aka Red Hat Directory …
• CVE-2012-2747Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allo…
• CVE-2012-2748Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allo…
• CVE-2012-2749MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows rem…
• CVE-2012-2750Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has u…
• CVE-2012-2752Untrusted search path vulnerability in VMware vMA 4.x and 5.…
• CVE-2012-2753Untrusted search path vulnerability in TrGUI.exe in the Endp…
• CVE-2012-2759Cross-site scripting (XSS) vulnerability in login-with-ajax.…
• CVE-2012-2760mod_auth_openid before 0.7 for Apache uses world-readable pe…
• CVE-2012-2762SQL injection vulnerability in include/functions_trackbacks.…
• CVE-2012-2763Buffer overflow in the readstr_upto function in plug-ins/scr…