Unconfirmed PHP2Shell exploit allegedly enables RCE on all PHP versions since 2004

An unconfirmed report claims PHP2Shell enables remote code execution on PHP sites. watchTowr says the flaw allegedly affects all versions since PHP 5, released in 2004, with fixes expected to drop shortly.

• PHP2Shell allegedly enables RCE on PHP sites
• watchTowr says all versions since PHP 5 (2004) are affected
• Fixes for the severe vulnerabilities are due shortly
• The report remains unconfirmed