[PHP] PHP 8.2.8 Vulnerable Version

Mailing Lists php.general
1

Hello PHP

I’m a cybersecurity student from Jordan. For my assignment, I need to simulate a security breach in a secure environment. Therefore, I was searching for a PHP version vulnerable to CVE-2024-4577 (PHP CGI Argument Injection vulnerability). The 8.2.8 version on your website is patched against it. Could you provide me with older versions of 8.2.8 that were unpatched? Alternatively, if you have an older version that is vulnerable to it, please let me know.

Thank you for your time, and I look forward to hearing from you.

2

Hi Mohammed

You can find older versions on PHP: Releases

Thanks
Kasper

···

On 25 Apr 2025 18:02, Mohammed ali Samhouri mohammedalisamhouri@gmail.com wrote:

Hello PHP

I’m a cybersecurity student from Jordan. For my assignment, I need to simulate a security breach in a secure environment. Therefore, I was searching for a PHP version vulnerable to CVE-2024-4577 (PHP CGI Argument Injection vulnerability). The 8.2.8 version on your website is patched against it. Could you provide me with older versions of 8.2.8 that were unpatched? Alternatively, if you have an older version that is vulnerable to it, please let me know.

Thank you for your time, and I look forward to hearing from you.