Netskope Threat Labs

SERVER-WEBAPP PHP PHP-CGI command execution attempt

IPS-NPA

1 SID: 63598

Detects an attempt to exploit CVE-2024-4577, a command injection flaw that can run operating system commands on the server in PHP PHP-CGI. The flaw saw mass exploitation against exposed PHP-CGI endpoints shortly after disclosure.