Ars Technica · Dan Goodin ·
An unconfirmed report claims PHP2Shell enables RCE on PHP sites; watchTowr says the exploit allegedly affects all versions since PHP 5, released in 2004
Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little …
Lead Source
How this story grew
Coverage · 0
Discussion · 0
Oct 21Oct 22
More
Jackelsyn: Jackelsyn
The Verge: The Verge
Wall Street Journal: Wall Street Journal
Reuters: Reuters
Wccftech: Wccftech
Metacurity: Metacurity
AppleInsider: AppleInsider
Forbes: Forbes
PHP: PHP
Huntress: Huntress
wiz.io: wiz.io
iTnews: iTnews
Sansec: Sansec
The Hacker News: The Hacker News
Cyber Security News: Cyber Security News
PC Gamer: PC Gamer
The Independent: The Independent
Discussion
@thephpf @watchtowrcyber @dok2001 @k_firsov @marckohlbrugge @alvosec @j4ck3lsyn @mattjay @r0ckstardev @kostastsale @rina4_tot @hawolt @ncsc @codewithtamara @mattjay @obsproject @watchtowrcyber @heyandras @44latte @jeftovic @arvidkahl @taylorotwell @magicaltux @wescopeland_ @magicaltux @lowleveltweets @mattiasgeniar @iinovacore @udiwertheimer @austen @cyb3rops @icesolst @esotericpigeon @soeckly @jurbed @intcyberdigest @cyb3rops @acd421 @arvidkahl @zekramu @bishara @moyix @mattiasgeniar @uk_daniel_card @mattjay @attrc @tayvano_ @mrpxssy @heyandras @ryanzohoury @pinboard @openhack @lowleveltweets @marcelpociot @astuyve @h4x0r_dz @cyb3rops @hazelcaffed @whiteintel_io @j4ck3lsyn
Related stories
The Hacker News: GitLab patches a critical flaw that lets unauthenticated attackers run code on self-managed servers, affecting every release since 7.0 in 2014