In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configurations of Windows codepages, the fixes for  CVE-2024-4577 https://github.com/advisories/GHSA-vxpp-6299-mxw3  may still be bypassed and the same command injection related to Windows "Best Fit" codepage behavior can be achieved. This may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configurations of Windows codepages, the fixes for  CVE-2024-4577 https://github.com/advisories/GHSA-vxpp-6299-mxw3  may still be bypassed and the same command injection related to Windows "Best Fit" codepage behavior can be achieved. This may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configurations of Windows codepages, the fixes for  CVE-2024-4577 https://github.com/advisories/GHSA-vxpp-6299-mxw3  may still be bypassed and the same command injection related to Windows "Best Fit" codepage behavior can be achieved. This may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before ...

PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)

Уязвимость интерпретатора языка программирования PHP, существующая из-за непринятия мер по нейтрализации специальных элементов, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Множественные уязвимости php

Множественные уязвимости php

Множественные уязвимости php

ALT-PU-2024-18047: package `php8.1-soap` update to version 8.1.30-alt1

ALT-PU-2024-17955: package `php8.3-soap` update to version 8.3.12-alt1

ALT-PU-2024-17951: package `php8.1-soap` update to version 8.1.30-alt1

ALT-PU-2024-17912: package `php8.2-soap` update to version 8.2.24-alt1

ALT-PU-2024-13710: package `php8.1` update to version 8.1.30-alt1

ALT-PU-2024-13522: package `php8.1` update to version 8.1.30-alt1

ALT-PU-2024-13465: package `php8.2` update to version 8.2.24-alt1

ALT-PU-2024-13449: package `php8.3` update to version 8.3.12-alt1

ALT-PU-2024-18037: package `php8.2-soap` update to version 8.2.24-alt1

ALT-PU-2024-13711: package `php8.2` update to version 8.2.24-alt1