World Wide Critical PHP remote control security attack ( October 21st) Should we update or no ?

1

10yearswebmaster

Newbie
Joined
May 22, 2026
Messages
28
Reaction score
5
So i saw this on the news that the worldwide attack on the php on all websites powered by Php will be attacked and it might get injected with malicious ads, pops, banners or hidden crypto miner on the server itself.

Should we listen to the public news and update to latest or ? websites Am using 7+ and 8+ version now, not sure if i should fear of this attack ?
 
Advertise on BHW
This is what I hear from a friend of mine, that runs an actual development company:

This is a "drop everything you are fucking doing" security issue.
https://www.huntress.com/blog/php2shell ... rabilities

Remote code execution in every php version since PHP 5.4. What does this mean? This exploit basically gives someone a remote shell on your server in seconds. Almost every server.

The only known mitigation is setting in php.ini
session.upload_progress.enabled = Off
Click to expand...
 
turn off session.upload_progress now and check phpinfo() on the site itself, the cli php.ini is often a different file. then update once the fixed builds land, 7.x wont get one so plan to move those sites to 8.2+
 
Kind of a bizarre question. What do you mean "should we update"?
Of course you need to update, it’s an actual CVE, a proven vulnerability.
I’ve already applied a quick fix across all my servers.

PS: Got hacked a long time ago, didn't really enjoy the experience.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top