PHP2Shell flaws put servers across much of the web at risk
Two related memory safety flaws in PHP, grouped under the name PHP2Shell, could let attackers run code remotely on affected servers. The vulnerabilities matter because PHP is used by an estimated 70 per cent of websites, leaving a large part of the web potentially exposed.
The flaws affect PHP versions dating back to about 5.4, and were first identified in August. Emergency patches were released on Wednesday after leaks and an exploit video prompted warnings; some systems running very old versions have no direct update path and may need to be shut down and reinstalled.
In short
- PHP2Shell flaws could enable remote code execution.
- An estimated 70 per cent of websites use affected PHP code.
- Emergency patches are available, but some legacy systems cannot update directly.
Art Culture Cybersecurity Technology
Read the full article at the source →
Originally published by The Register as “We shouldn’t be surprised about the PHPocalypse, as the internet is built on sticks and glue”.