CVE-2024-4577: Proof of Concept Available for PHP-CGI Argument Injection Vulnerability

Researchers disclose a critical severity vulnerability affecting PHP installations and provide proof-of-concept exploit code, which could lead to remote code execution.

Background

On June 6, maintainers of PHP released updates to address a critical vulnerability affecting installations where PHP is used in CGI mode. As part of a coordinated release, researchers at DEVCORE published a blog post with their analysis of the vulnerability and its impact.

CVEDescriptionCVSSv3CVE-2024-4577PHP-CGI Argument Injection Vulnerability9.8

Analysis

CVE-2024-4577 is a critical argument injection …