PHP vulnerability. The world is on fire. Millions of websites at risk.

dvc

dvc

Senior Member
Jr. VIP
Joined
Aug 23, 2022
Messages
1,129
Reaction score
997
PHP2shell is its name, and it looks like a 14 years bug that was leaked today and the fix isn't ready! Crazy!

Gov websites completely shut down, to prevent major data stealing.

Go update your WP sites.
 
Advertise on BHW
Actually, people need to update theirs php version, being the site with wordpress or any platform. This issue is executed on php, not in wp code.
 
  • Like
Reactions: dvc
itsworth said:
Actually, people need to update theirs php version, being the site with wordpress or any platform. This issue is executed on php, not in wp code.
Click to expand...
You are correct.

It's a php engine issue not a cms one. I stand corrected

70% of internet man. Scary. Seems like official patch is out.
 
Yes, it was already corrected man! You just need to use any of those php versions: 8.5.12, 8.4.27, 8.3.36 and 8.2.35. And i totally agree with you, it's crazy to think that this much of the internet isn't even aware of this issue. I hope i'm wrong, but i guess this type of problem will be constant with ai advancing as it is.
dvc said:
You are correct.

It's a php engine issue not a cms one. I stand corrected

70% of internet man. Scary. Seems like official patch is out.
Click to expand...
 
My main worry is that this event could happen again but much bigger. Now there is a solution.. What comes next is not clear. Only time will tell.
 
the_mago said:
Wtf do you mean the fix isn't ready? Already updated my servers this morning!
Click to expand...

You'd be surprised how many sites use older versions of PHP and that makes it more difficult since end of life cycle has happened. Otherwise yes a simple php upgrade can fix this issue.
 
dvc said:
Dangerous if reported publicly before a patch if a fix is out.
Click to expand...
The official channels are public CVE database site where the vulnerabilities are listed hot. With Ai anything code is not secret or private any more. 2007 will be war between the good guys and bad guys using Ai will be at the peak.
 
Tinfoil said:
The official channels are public CVE database site where the vulnerabilities are listed hot. With Ai anything code is not secret or private any more. 2007 will be war between the good guys and bad guys using Ai will be at the peak.
Click to expand...

2007? Either this is happening in another reality or all of us about to travel back in time via terminator style to fight a war between bad guys using AI.
 
Thread moved to a more suitable section.

This looks bad. Don't ignore this vulnerability especially if you are self-hosting!
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top