Amazon Logged PHP Exploit Attempts Before Oct. 21 Fixes

Amazon’s MadPot honeypot network recorded an attempted PHP2Shell exploit on Oct. 17, four days before fixes for two vulnerabilities that allow unauthenticated remote code execution on servers handling web requests became available. The traffic came from an IP address associated with a commercial anonymization network. The honeypot observation does not establish that anyone compromised a live PHP server. The PHP Foundation moved its planned security release from 10 a.m. ET Oct. 22 to 10 a.m. ET Oct. 21 (1400 UTC), after the CVE identifiers began circulating around 11 a.m. ET Oct. 20 (1500 UTC).

Source: TokenPost