php2shell: The PHP Bug That Fires Before Your Code Runs

Two critical PHP flaws landed October 21 and were in CISA's exploited-vulnerabilities catalog five days later. The 9.2 score isn't the part that should bother you. It's where the bug lives — it goes off while PHP is still assembling $_POST, before a single line of your application has run.

Read the full article →

Discussion thread — share findings, corrections and follow-ups below.