php2shell: Critical flaws allow code injection in PHP

Two flaws expose PHP web servers to remote attacks. Versions from the past 20 years are affected; admins should patch.

Critical PHP updates on Oct. 21 fix code injection vulnerabilities

Technical details are due at 4 p.m., but the situation is serious: Remote code execution is possible. Admins should weigh the ...
Help Net Security

PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577)

An OS command injection vulnerability in Windows-based PHP (CVE-2024-4577) in CGI mode is being exploited by the TellYouThePass ransomware gang. Discovered and reported by Orange Tsai, principal ...