PHP Flaws Could Let Attackers Take Control of Web Servers
Photo: TokenPost
Two severe flaws in PHP could let remote attackers run commands on vulnerable servers, putting crypto platforms and other websites at risk of full system takeover. The bugs, called php2shell, are remote-code-execution vulnerabilities. A specially constructed web request could trigger them and make a server execute commands. PHP maintainers moved the planned release of emergency fixes to 10 a.m. ET (14:00 UTC) Wednesday after a forum post surfaced the day before. An attack may be detectable if a PHP process unexpectedly starts bash, Python or curl to retrieve malicious files.
Source: TokenPost
