php2shell: Critical PHP flaws reported to allow code injection
What happened
According to a heise online report, critical flaws in PHP, named "php2shell", allow code injection. Only the headline was available, so the full scope is unconfirmed here.
When it started
The publication date and any disclosure timeline are not included in the information provided.
How it spread
The available source does not describe the technical mechanism or how the flaws are exploited. Details should be checked in the full article and any official PHP advisories.
Why it matters
PHP is widely used to run websites and web applications, so reports of critical code injection flaws draw attention to which versions are affected and whether fixes are available. The affected versions and patch status are not stated in the source provided.