CVE-2022-31626 PoC — PHP 安全漏洞

Source

https://github.com/amitlttwo/CVE-2022-31626

Associated Vulnerability

Title:PHP 安全漏洞 (CVE-2022-31626)
Description:PHP是一种在服务器端执行的脚本语言。 PHP存在安全漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。

Readme

# CVE-2022-31626


In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.

File Snapshot


 [4.0K]  /data/pocs/e345aacf6742bb1faa73155a56a5c3f4264d57bb
├── [2.5K]  exploit.py
└── [ 364]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.