+- Bezbedan Balkan (https://bezbedanbalkan.net)
+-- Forum: Opšte teme (https://bezbedanbalkan.net/forum-1.html)
+--- Forum: Vesti, zanimljivosti i razno (https://bezbedanbalkan.net/forum-26.html)
+--- Thread: New PHP Vulnerability Exposes Windows Servers to Remote Code Execution (/thread-1527.html)
New PHP Vulnerability Exposes Windows Servers to Remote Code Execution - VincaSec - 06-10-2024
Quote:Details have emerged about a new critical security flaw impacting PHP that could be exploited to achieve remote code execution under certain circumstances.https://thehackernews.com/2024/06/new-php-vulnerability-exposes-windows.html
The vulnerability, tracked as CVE-2024-4577, has been described as a CGI argument injection vulnerability affecting all versions of PHP installed on the Windows operating system.
According to DEVCORE security researcher, the shortcoming makes it possible to bypass protections put in place for another security flaw, CVE-2012-1823.