Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects web requests attempting to exploit PHP-CGI command-line argument injection vulnerabilities (such as CVE-2012-1823 or the soft-hyphen variant CVE-2024-4577) or inject PHP configuration directives (e.g., allow_url_include, auto_prepend_file, php://input) via query strings or URIs to achieve pre-authentication remote code execution.
avatar
Suraj A@cytech
avatar
Detections.ai Community
22 hours ago
1010