Php2Shell: Critical PHP vulnerability discovery
In light of the recent discovery of critical vulnerabilities in the scripting language, PHP, we have developed a new Loss Prevention Standard: ‘Php2Shell – Critical PHP Vulnerability Discovery’.
PHP is used on a large portion of websites across the internet, and running a vulnerable version of this may allow attackers to execute commands remotely, without having to authenticate.
The new LPS covers:
- The background of the security flaws
- What an attacker could do
- Affected versions
- Practical next steps to take if you have been affected
View the new LPS here: Php2Shell – Critical PHP Vulnerability Discovery