GgoogleIT first seen 5 d ago, last 5 d ago, peak #3
Two unpatched critical PHP flaws trigger security alert
Original: php2shell
Security researchers have raised an emergency alert over two critical, unpatched PHP vulnerabilities that allow remote code execution on servers. The flaws carry a CVSS score of 9.2, and the technique of turning PHP input into a shell, dubbed php2shell, is drawing attention from system administrators racing to assess exposure. With no patches available, experts are urging operators to apply workarounds and monitor systems for exploitation.
Why now: The flaws are critical and still unpatched, so administrators are scrambling for mitigation guidance.
Evidence
- PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert · The Hacker News
Elsewhere
API: https://socialmediatrends-api.osmike.com/v1/trends/3121582