PHP-CGI argument injection on Windows (CVE-2024-4577) ยท updates https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577 A bypass of the old CVE-2012-1823 fix: on Windows, PHP's 'Best-Fit' character mapping let attackers inject arguments into PHP running in CGI mode (including default XAMPP setups) and execute code remotely. Found by Orange Tsai (DEVCORE) and fixed in PHP 8.3.8, 8.2.20 and 8.1.29. Exploitation, including by ransomware operators, followed within days. Added to the CISA KEV catalog on 2024-06-12. CISA lists known use in ransomware campaigns. en Wed, 12 Jun 2024 00:00:00 GMT PHP-CGI argument injection on Windows (CVE-2024-4577): CISA added CVE-2024-4577 to the KEV catalog (federal deadline 2024-07-03) https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577 https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577#2024-06-12-d210281c Wed, 12 Jun 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> PHP-CGI argument injection on Windows (CVE-2024-4577): CVE-2024-4577 published https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577 https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577#2024-06-09-9d811e89 Sun, 09 Jun 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-4577">Source</a></p> PHP-CGI argument injection on Windows (CVE-2024-4577): DEVCORE discloses CVE-2024-4577; fixed PHP releases available https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577 https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577#2024-06-06-2402274f Thu, 06 Jun 2024 00:00:00 GMT critical <p><a href="https://devco.re/blog/2024/06/06/security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en/">Source</a></p>