An unconfirmed report claims PHP2Shell enables RCE on PHP sites; watchTowr says the exploit allegedly affects all versions since PHP 5, released in 2004 (Dan Goodin/Ars Technica) — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- PHP2Shell is reported to enable remote code execution on PHP websites; watchTowr says the exploit allegedly affects all versions since PHP 5, released in 2004, but the report is unconfirmed.
- PHP maintainers told web developers to prepare for critical security patches, while fixes for what are believed to be uncommonly severe vulnerabilities are scheduled.
Why it matters: Website administrators are the directly affected group: the alleged exposure reaches back to PHP 5 from 2004, rather than being confined to a recent release. Even with the report unconfirmed, maintainers are preparing critical security patches for what are believed to be unusually severe vulnerabilities.
Ask SkimNews
