CVE-2024-4577 PoC — Argument Injection in PHP-CGI

Source

https://github.com/Sh0ckFR/CVE-2024-4577

Associated Vulnerability

Title:Argument Injection in PHP-CGI (CVE-2024-4577)
Description:In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

Description

Fixed and minimalist PoC of the CVE-2024-4577

Readme

# CVE-2024-4577
Fixed and minimalist PoC of the CVE-2024-4577

I just tested some PoCs for this vulnerability, and a few of them were not working correctly, so I fixed it by creating my own non-intrusive and minimalist PoC to check if you are vulnerable.

How to use:

`python3 CVE-2024-4577.py URL`

Exemple: `python3 CVE-2024-4577.py http://127.0.0.1/` (Do not specify the php-cgi path, only the base url).

File Snapshot


 [4.0K]  /data/pocs/aa831b68eb0d52ed23ddfaebcc187f6b18bfa152
├── [1.8K]  CVE-2024-4577.py
├── [1.0K]  LICENSE
└── [ 409]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!