[Feature Request] Add Vuln Module for PHP CGI Argument Injection (CVE-2024-4577)

Summary

Proposing a new vulnerability detection module for CVE-2024-4577 (PHP CGI Argument Injection), a critical unauthenticated Remote Code Execution flaw listed in the CISA KEV catalog.

Vulnerability Details

• CVE ID: CVE-2024-4577
• Severity: Critical (CVSS 9.8) - CISA KEV Listed
• Target: PHP running in CGI mode on Windows systems.
• Detection Rationale: Sends a crafted HTTP request with specific query string arguments (e.g., %ad-d+allow_url_include%3d1) to check if the target PHP interpreter parses CGI options inappropriately.
• False Positive Mitigation: Validates specific HTTP response status codes and expected response body patterns to prevent false positives.

Coverage Verification

• Verified that no existing module covers CVE-2024-4577 under nettacker/modules/vuln.
• Verified there are no open/closed PRs or issues regarding this CVE.

I would like to work on this and submit the YAML detection module. Could you please review and assign this issue to me? @securestep9 @arkid15r

Start by inspecting the existing vulnerability modules under nettacker/modules/vuln and compare their YAML structure and detection logic. Add a module for CVE-2024-4577 that sends the described crafted request, validates the relevant response status and body patterns, and avoids false positives.