Open Menu
AllLocalCommunitiesAbout
lotide
AllLocalCommunitiesAbout
Login

There isn't an easy exploit for this PHP vulnerability

⁨7⁩ ⁨likes⁩

Submitted ⁨⁨8⁩ ⁨hours⁩ ago⁩ by ⁨cm0002@no.lastname.nz⁩ to ⁨cybersecurity@infosec.pub⁩

https://eliastaylor.com/noexploit/

source

Comments

Sort:hotnewtop
  • cron@feddit.org ⁨1⁩ ⁨hour⁩ ago

    I think the author is right.

    It appears that exploitation is not a single script, but it requires careful preparation and adaption to different environments (e.g. mod_php vs php_fpm). Additionally, not every exploit works on every version, which makes exploitation at scale hard.

    source