Add vectors for the PHP interpreter

SonarSource / argument-injection-vectors

A curated list of argument injection vectors

GNU General Public License v3.0

37 stars 3 forks source link

Add vectors for the PHP interpreter #17

Open thomas-chauchefoin-sonarsource opened 1 year ago

thomas-chauchefoin-sonarsource commented 1 year ago

CVE-2012-1823 was a pretty cool bug on php-cgi that let inject arbitrary arguments; it was exploited with the help of auto_prepend_file and it likely still applies today.