.. / CVE-2024-4577

• RCE
• PoC
• Nuclei
• Web

Exploit for PHP CGI < 8.3.8, 8.2.20, 8.1.29 - Unauthenticated Remote Code Execution (CVE-2024-4577)

Description:

PHP CGI - Argument Injection (CVE-2024-4577) is a critical argument injection flaw in PHP.

Affected Products:

• PHP 8.3 < 8.3.8
• PHP 8.2 < 8.2.20
• PHP 8.1 < 8.1.29

Nuclei Template

View the template here CVE-2024-4577.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-4577.yaml

References: