CVE-2012-5381

CVE-2012-5381 describes an untrusted search path vulnerability in PHP 5.3.17 when installed in the C:\ directory, potentially allowing local privilege escalation via a Trojan horse DLL. This vulnerability specifically affects PHP installations on Windows operating systems. The severity is rated as medium (CVSS 6.0) due to its local attack vector and high impact on confidentiality, integrity, and availability, though it requires a separate administrative action to establish the unsafe PATH. While the CVE disputes the issue as not a default PHP installation behavior, an ExploitDB entry exists for a related missing DLL vulnerability, but there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion.