PHP-CGI CVE-2024-4577 soft-hyphen argument injection request (RedTail)

ills3c Intel&Coffee@Ills3C

•updated today•0•0•3

Detects exploitation attempts against CVE-2024-4577, a PHP-CGI argument injection vulnerability, by identifying soft-hyphen encoding (%AD) injected alongside PHP configuration options such as allow_url_include and auto_prepend_file=php://input in request URLs.