Checking the php.ini reveals that extension=pdo is present and accounted for. Checking the extension directory (nginx\php\ext) reveals that the file "php_pdo.dll" is in fact missing. The installation ...

Even when PHP isn’t set to CGI mode, however, the vulnerability may still be exploitable when PHP executables such as php.exe and php-cgi.exe are in directories that are accessible by the web ...

CVE-2024-4577 is a critical PHP-CGI argument injection flaw patched in June that impacts PHP installations running on Windows systems with PHP running in CGI mode.