PHP2Shell exploitation moves from probes to working shells
Attackers have successfully exploited the PHP2Shell vulnerabilities to run shell commands on honeypot servers, according to a researcher. PHP described the flaws as critical and exploitable for unauthenticated remote code execution. PHP released fixes on October 21.
CERT24