Exploit for OS Command Injection in Php CVE-2024-4577

Name: Exploit for OS Command Injection in Php CVE-2024-4577
Rating: 5 (883 reviews)

2025-04-12 | CVSS 9.8

## https://sploitus.com/exploit?id=C99986A2-7B57-5939-9BD1-AA95A6572AF3
# CVE-2024-4577

```
usage: CVE-2024-4577.py [-h] [-v] RHOST RPORT URL COMMAND

PHP CGI CVE-2024-4577 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-4577

positional arguments:
  RHOST          remote host
  RPORT          remote port
  URL            target address
  COMMAND        command to execute e.g. <?php system('calc')?>

optional arguments:
  -h, --help     show this help message and exit
  -v, --version  show program's version number and exit
```