Multiple Vulnerabilities in PHP Could Allow for Remote Code Execution
ID: aa41f7ae-d9e4-5465-a3d4-739328fc6302
STIX ID: report--aa41f7ae-d9e4-5465-a3d4-739328fc6302
Feed Name: CISecurity.org Advisories
Threat Score
### Executive Summary Multiple vulnerabilities were identified in PHP that could allow remote code execution, a security-feature bypass via environment variable collision (cgi.force_redirect bypass), insufficient logging manipulation, and multipart input validation bypass. The report ties these findings to ATT&CK Execution tactics and the Command and Scripting Interpreter technique (T1059) and enumerates CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, and CVE-2024-9026.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
