Two critical RCEs in PHP core

T1Covered by 1 source · first reported by Cisco Talos at 21 Oct, 15:10 UTC

Cisco Talos is tracking the disclosure of two unauthenticated remote code execution (RCE) flaws in PHP core, dubbed “php2shell”, triggered by a plain HTTP request and exploitable before any application code runs, affecting every PHP build since 5.4. Based on the entities involved in the disclosure…

security

Sources

• T1Two critical RCEs in PHP coreCisco Talos21 Oct, 15:10