Php on fr1zz0https://fr1zz0.it/en/tags/php/Recent content in Php on fr1zz0Hugo -- gohugo.ioen© 2026 Andrea FranzanteFri, 30 Oct 2026 00:00:00 +0000PHP2Shell: patching is easy, knowing where to patch isn'thttps://fr1zz0.it/en/posts/php2shell-asset-inventory/Fri, 30 Oct 2026 00:00:00 +0000https://fr1zz0.it/en/posts/php2shell-asset-inventory/<p>On 21 October the PHP project released versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two vulnerabilities that, within days, got the name PHP2Shell. They are flaws in the interpreter itself, not in a framework or a CMS, so they affect any PHP installation that serves web requests.</p>