{"uuid": "db43182c-4691-47c5-a3ca-813e5935056a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4577", "type": "published-proof-of-concept", "source": "https://t.me/cybersecs/2854", "content": "[ CVE-2024-4577 - Yet Another PHP RCE: Make PHP-CGI Argument Injection Great Again! ]\n\nNew research by Orange Tsai!\n\nThis is a side story/extra bug while I\u2019m preparing for my Black Hat USA presentation. I believe most of the details have already been covered in the official advisory (should be published soon). Although PHP-CGI has gradually been phased out over time, this vulnerability affects XAMPP for Windows by default, allowing unauthenticated attackers to execute arbitrary code on remote XAMPP servers through specific character sequences.\n\nThis vulnerability affects all versions of PHP installed on the Windows operating system. Please refer to the table below for details:\n\nPHP 8.3 < 8.3.8\nPHP 8.2 < 8.2.20\nPHP 8.1 < 8.1.29\n\nBlog: https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html\n\nPoC: https://github.com/watchtowrlabs/CVE-2024-4577", "creation_timestamp": "2024-06-09T19:52:18.000000Z"}