Dan Goodin / Ars Technica : An unconfirmed report claims PHP2Shell enables RCE on PHP sites; watchTowr says the exploit allegedly affects all versions since PHP 5, released in 2004 — Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little …
An unconfirmed report claims PHP2Shell enables RCE on PHP sites; watchTowr says the exploit allegedly affects all versions since PHP 5, released in 2004 (Dan Goodin/Ars Technica)
In short
An unconfirmed report claims PHP2Shell, a security vulnerability, enables Remote Code Execution (RCE) on PHP websites. WatchTower, a security firm, claims the exploit allegedly affects all versions of PHP since its release in 2004. Website administrators are advised to brace themselves as fixes for the vulnerabilities are scheduled to drop soon.
Key points
- An unconfirmed report claims PHP2Shell, a security vulnerability, enables Remote Code Exe…: An unconfirmed report claims PHP2Shell, a security vulnerability, enables Remote Code Execution (RCE) on PHP websites.
- WatchTower, a security firm, claims the exploit allegedly affects all versions of PHP sin…: WatchTower, a security firm, claims the exploit allegedly affects all versions of PHP since its release in 2004.
- Website administrators are advised to brace themselves as fixes for the vulnerabilities a…: Website administrators are advised to brace themselves as fixes for the vulnerabilities are scheduled to drop soon.