CVE-2024-4577: PHP CGI Argument Injection
What is CVE-2024-4577?
An argument injection vulnerability in PHP CGI on Windows that bypasses the CVE-2012-1823 protection. Attackers can use specific Unicode character encoding to inject arguments into PHP CGI, leading to remote code execution.
Impact & Exploitation
Exploited in the wild within 24 hours. Affects all unpatched PHP installations using CGI mode on Windows — a common configuration in legacy enterprise applications.
How Precogs AI Detects PHP CGI Argument Injection
Precogs AI Binary DAST detects PHP CGI argument injection during runtime testing of compiled PHP applications on Windows, including legacy deployments.
Precogs Research
This vulnerability intelligence report was analyzed and enriched by the Precogs AI Security Team. Our researchers continuously monitor emerging threats across AI code, LLM pipelines, and binary architectures to ensure accurate real-time remediation guidance.