CVE-2019-11043 PoC — Underflow in PHP-FPM can lead to RCE

Source

Associated Vulnerability

Title:Underflow in PHP-FPM can lead to RCE (CVE-2019-11043)
Description:In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.

Description

CVE-2019-11043

Readme

### This tool exploits a vulnerability called [CVE-2019-11043](https://nvd.nist.gov/vuln/detail/CVE-2019-11043), an instance of insecure pointer arithmatic, to gain access to poorly configured PHP servers.
## It can be downloaded [here](https://github.com/jptr218/php_hack/raw/main/php_hack.exe) (you will need to run it from the command line)
### Usage:

### `php_hack [target IP] [target port] `

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!