CVE-2024-4577 PoC — Argument Injection in PHP-CGI

Source

https://github.com/Didarul342/CVE-2024-4577

Associated Vulnerability

Title:Argument Injection in PHP-CGI (CVE-2024-4577)
Description:In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

Readme

# CVE-2024-4577
Argument injection vulnerability in PHP


## INSTALL

git clone https://github.com/didarul342/CVE-2024-4577.git

cd CVE-2024-4577

pip3 install -r requirements.txt


## USAGE

```py


# Scan A Target

python3 CVE-2024-4577.py -t https://160.153.61.66/ -c "<?phpphpinfo();?>"

# Scan a list of Targets

python3 CVE-2024-4577.py -f domains.txt -c  "<?phpphpinfo();?>"

```

File Snapshot


 [4.0K]  /data/pocs/be4783ce314624f4d7b710bff6aab7a254f8e623
├── [2.1K]  CVE-2024-4577.py
├── [ 388]  README.md
└── [  18]  requirements.txt

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!