CVE-2024-4577 Vulnerability in PHP Could Allow Command Injection and Source Code Revelation

CVE-2024-8926

Summary

In certain configurations involving non-standard Windows codepages, vulnerabilities in specific versions of PHP may allow attackers to exploit command injection weaknesses. These weaknesses can lead to unauthorized access to PHP binary options, enabling malicious actors to reveal script source code or execute arbitrary PHP code on affected servers. This threat underscores the importance of strict configuration management and regular updates for PHP installations.

References