This is and update on the php2shell vulnerability and a response to the blog post from https://lemmy.world/post/53441818 : https://eliastaylor.com/noexploit/

you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 1 day ago

Some servers do publically list their PHP version, and as an example there are currently ~23,000 that list PHP 8.5.11: https://www.shodan.io/search?query=PHP%2F8.5.11

Sure these could be a manually patched version of 8.5.11, but I find that pretty unlikely.

  • source
  • parent