Nginx Null Byte Code Execution

Description

Allowing null byte character (ASCII 0x00) in the URL can lead to a severe security risk. If the user can manipulate file contents on the server, this vulnerability may result in arbitrary PHP code execution, enabling attackers to take control of the server and execute unauthorized commands.

Recommendation

Upgrade Nginx to a version that properly sanitizes input and disallows null byte characters in URLs.

References

• Nginx
• CVE-2013-2028
• CWE-158
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Nginx Code Execution due to Misconfiguration - Vulnerability
• Agnai vulnerable to Remote Code Execution via JS Upload using Directory Traversal - CVE-2024-47169
• LiquidJS is Vulnerable to Remote Code Execution - CVE-2026-45618
• angular-base64-upload vulnerable to unauthenticated remote code execution - CVE-2024-42640

You might also like:

Apache and Express Path Traversal plus Nginx Restriction Bypass Tests with SmartScanner

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

Tags:

Nginx

Arbitrary Code Execution

Input Validation