Main
Vulnerability Database
Exploits
ID:10777 - Exploit for OS Command Injection in PHP - CVE-2024-4577
ID:10777 - Exploit for OS Command Injection in PHP - CVE-2024-4577
Published: October 30, 2024
Vulnerability identifier: #VU91106
Vulnerability risk: Critical
CVE-ID: CVE-2024-4577
CWE-ID: CWE-78
Exploitation vector: Remote access
Vulnerable software:
PHP
PHP
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.
The vulnerability exists due to improper input validation in PHP-CGI implementation. A remote attacker can send specially crafted HTTP request to the application and execute arbitrary OS commands on the system.
Remediation
Install updates from vendor's website.