An Interest In:
Web News this Week
- March 31, 2024
- March 30, 2024
- March 29, 2024
- March 28, 2024
- March 27, 2024
- March 26, 2024
- March 25, 2024
Some of Our Sources
- BoingBoing
- Simplebits
- Pearsonified
- The Logo Smith
- You The Designer
- Naldz Graphics
- Crazy Leaf Design
- Fudge Graphics
- Freelance Switch
- TechPowerUp
Help Webnuz
Referal links:
October 27, 2019 04:34 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/sy41HF20lhE/nasty-php7-remote-code-execution-bug-exploited-in-the-wild-on-nginx-servers
Nasty PHP7 Remote Code Execution Bug Exploited in the Wild on NGINX Servers
nickwinlund77 shares this story from ZDNet:A recently patched security flaw in modern versions of the PHP programming language is being exploited in the wild to take over servers, ZDNet has learned from threat intelligence firm Bad Packets. The vulnerability is a remote code execution (RCE) in PHP 7, the newer branch of PHP, the most common programming language used to build websites. The issue, tracked as CVE-2019-11043, lets attackers run commands on servers just by accessing a specially-crafted URL. Exploiting the bug is trivial, and public proof-of-concept exploit code has been published on GitHub earlier this week. Only NGINX servers with PHP-FPM enabled are vulnerable. PHP-FPM, or FastCGI Process Manager, is an alternative PHP FastCGI implementation with some additional features, and according to reports, a common server configuration option.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/sy41HF20lhE/nasty-php7-remote-code-execution-bug-exploited-in-the-wild-on-nginx-servers
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot