Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.misc > #94579

Re: PHP2Shell

Path csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From Andy Burns <usenet@andyburns.uk>
Newsgroups comp.os.linux.misc
Subject Re: PHP2Shell
Date Thu, 22 Oct 2026 19:45:34 +0100
Lines 10
Message-ID <njv3ugFjuhmU1@mid.individual.net> (permalink)
References <11bdjto$13lnp$1@dont-email.me> <njv2tnFjpo3U1@mid.individual.net> <11bdl2u$13lnp$4@dont-email.me>
Mime-Version 1.0
Content-Type text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding 7bit
X-Trace individual.net 985f6k3kjFFIf2VfOkw6PQxw2eL+WytC8M0aHUwjE/kMORwz82
Cancel-Lock sha1:36ZF9zBCzXHTVGog8S9RiQ2oBe0= sha256:FbgqTsvYBjK3ENYdBjyIFZscXzrkxYkPu5NSNFwz4L8=
User-Agent Mozilla Thunderbird
Content-Language en-GB
In-Reply-To <11bdl2u$13lnp$4@dont-email.me>
Xref csiph.com comp.os.linux.misc:94579

Show key headers only | View raw

The Natural Philosopher wrote:

> That sounds like it is only relevant to large uploads: If the code 
> doesn't permit that you should be safe?

I did hear that causing the exploit depended on uploads, but wasn't sure 
enough that no uploads made it safe, so did recommend one customer to 
shut their customer portal down.

The code is written/hosted by a 3rd party, I just point the DNS at it.

Back to comp.os.linux.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

PHP2Shell The Natural Philosopher <tnp@invalid.invalid> - 2026-10-22 19:16 +0100
  Re: PHP2Shell Andy Burns <usenet@andyburns.uk> - 2026-10-22 19:28 +0100
    Re: PHP2Shell The Natural Philosopher <tnp@invalid.invalid> - 2026-10-22 19:36 +0100
      Re: PHP2Shell Andy Burns <usenet@andyburns.uk> - 2026-10-22 19:45 +0100
        Re: PHP2Shell The Natural Philosopher <tnp@invalid.invalid> - 2026-10-22 19:50 +0100
        Re: PHP2Shell doctor@doctor.nl2k.ab.ca (The Doctor) - 2026-10-23 01:59 +0000
  Re: PHP2Shell Richard Kettlewell <invalid@invalid.invalid> - 2026-10-22 19:58 +0100
    Re: PHP2Shell Nuno Silva <nunojsilva@invalid.invalid> - 2026-10-23 00:39 +0100

csiph-web