Apache HTTP Server FilesMatch Trailing-Newline Access-Control Bypass

This repository is a small Dockerized proof-of-concept environment for CVE-2017-15715, an Apache HTTP Server parsing issue that can allow FilesMatch/extension-based upload protections to be bypassed when a filename ends with a newline after .php. The repo contains four files: a Dockerfile that builds a vulnerable Apache/PHP container from vulhub/php:5.5-apache, a docker-compose.yml that exposes the service, a README describing reproduction steps, and index.php, the vulnerable upload application. The core exploit logic is in index.php. It accepts a file upload plus a separate attacker-controlled filename from POST parameter name. It extracts the extension using PHP pathinfo() and blocks common PHP extensions (php, php3, php4, php5, phtml, pht). However, because the filename is user-controlled and only basename() is applied, a filename such as 1.php followed by a newline can evade the extension check while still being interpreted by vulnerable Apache/mod_php when requested as /1.php%0a. The script then writes the uploaded file directly into the web-accessible current directory using move_uploaded_file(), making the uploaded payload reachable and executable. This is a real exploit lab rather than a scanner or framework module. It does not include an automated exploit client; instead it provides a vulnerable target and demonstrates the exploitation workflow manually, likely using a proxy such as Burp Suite to inject the newline byte into the filename. The capability provided is upload-filter bypass leading to execution of arbitrary PHP code on the server.