CVE-2012-0830

CVE-2012-0830 is a remote code execution vulnerability in PHP 5.3.9, specifically within the php_register_variable_ex function. This flaw, an incorrect fix for a previous vulnerability, allows attackers to execute arbitrary code by sending requests with a large number of array variables. With a CVSS score of 7.5, it is a high-severity vulnerability that can be exploited remotely with low complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit/Nuclei modules, a Denial of Service exploit for a related PHP version exists on ExploitDB, and the vulnerability has garnered significant community discussion and media coverage.