PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't
You cannot fully block the two critical PHP flaws called PHP2Shell before today’s fix, and the one setting being passed around as a workaround is not enough on its own, the security firm that suggested it now says.
PHP will release the fix at 14:00 UTC on October 21 for two flaws it rates 9.2 out of 10, and has given no workaround of its own. Until you can install it, what lowers your
The post “PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't” appeared first on The Hacker News
Source:The Hacker News – [email protected] (The Hacker News)