php.cgi
by PHP
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-4577 | Cri | 0.29 | 9.8 | 1.00 | KEV | Jun 9, 2024 | In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions.… | |
| CVE-1999-0238 | 0.03 | — | 0.06 | Aug 1, 1997 | php.cgi allows attackers to read any file on the system. |
- risk 0.29cvss 9.8epss 1.00
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions.…
- CVE-1999-0238Aug 1, 1997risk 0.03cvss —epss 0.06
php.cgi allows attackers to read any file on the system.