Php-Ocalypse How
Նյութեր՝ 1 · վերջինը՝
Հիմնական փաստերը
- PHP software vulnerabilities were recently discovered that had sat dormant for years.
- These bugs allow unauthorized access to online systems running PHP without a password.
- The PHP Foundation publicly released patches on Wednesday that fixed the bugs.
- The PHP Foundation had provided early access to patches to major internet companies and web hosts.
- Security researchers at Calif discovered two critical bugs in PHP.
- The two bugs were first discovered in 2024 but were not considered exploitable at that time.
- Calif alerted the PHP Foundation about the bugs.
- PHP2Shell can be exploited remotely over the internet without user interaction.