PromptRiskDBThreat intelligence atlas
AI Vulnerability Context

CVE-2024-4577 - PHP Group PHP

PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823.

AI Vulnerability ContextCISA KEVPHP Group

Record summary

A quick snapshot of what this page covers.

CISA KEVyesWhether CISA lists this as exploited.
Techniques0AI attack methods connected to this vulnerability.
Case studies0Examples where this vulnerability is mentioned.

Vulnerability status

How serious this vulnerability is and whether it is known to be exploited.

CISA KEV
CVE ID
CVE-2024-4577
Vendor/project
PHP Group
Product
PHP
Vulnerability name
PHP-CGI OS Command Injection Vulnerability
Date added
2024-06-12
Due date
2024-07-03
Known ransomware campaign use
Known
CWE-78

Exploit context

What the vulnerability is about.

No description available. The source record only contains identifiers and metadata.

Source

Where this page information comes from.