PHP2Shell

PHP2Shell is a critical vulnerability in PHP-based web applications that allows an attacker to execute arbitrary code and gain control of a server. It is a class of exploit that enables remote command execution by leveraging flaws in PHP scripts.

Why it’s in the news: It is in the news due to the recent discovery of a third variant, its active exploitation by botnet operators like Mirai, and the lack of an emergency fix, prompting widespread warnings and mitigation advice for businesses.

Latest on PHP2Shell

• PHP2Shell: Who Is At Risk And How Can Businesses Stay Safe?
• Exposed to PHP2Shell? Cyber Experts Weigh in With Advice
• There's a third PHP2Shell bug, but it won't get an emergency fix
• PHP2Shell: Haven’t patched yet? Take these steps now to mitigate
• Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
• PHP2Shell exploit bypasses protections designed to stop remote code execution
• Fixing the critical PHP flaws is not as simple as clicking "Update."
• PHP2Shell exposes the weakness in coordinated vulnerability disclosure

Connections

17 entities linked to PHP2Shell across the news graph.