On October 21, the PHP Foundation released further details regarding the PHP2Shell vulnerability. Immediately thereafter, PHP patches were made available, which we installed on our own servers as well as on those of our clients.
It turned out to be possible to gain access to the back-end of websites—where data is typically stored—by performing specific actions via the website's front-end. All in all, a critical vulnerability.
Should your company require support regarding PHP and security, please get in touch with us.