| Anyone running an e-comm site using php? 13:42 - Oct 21 with 377 views | giant_stow |
https://www.ncsc.gov.uk/news/c
My hosting company is mitigating this by banning 'add to cart' actions as a stop gap, but yours might be different - something to be aware off. |  |
| |  |
| Anyone running an e-comm site using php? on 13:57 - Oct 21 with 339 views | DanTheMan |
Oof, this must be nasty if they are warning ahead of the CVE release. Most I can find is remote code execution which is never a good sign... |  |
| |
| Anyone running an e-comm site using php? on 14:00 - Oct 21 with 320 views | giant_stow |
| Anyone running an e-comm site using php? on 13:57 - Oct 21 by DanTheMan |
Oof, this must be nasty if they are warning ahead of the CVE release. Most I can find is remote code execution which is never a good sign... |
I have limited understanding, but it seems like a global issue, on all php versions and yes, code insertions are mentioned as is the word 'emergency'.
My company said the official advice is to take sites down completely, but they're mitigating by in their own way for now. gulp. This could screw many many people up. | |
| |
| Anyone running an e-comm site using php? on 14:07 - Oct 21 with 299 views | Guthrum |
Was trying to work out if my website used php. A lot of the info online is very unclear.
However, I built it by hand using HTML & CSS, with nothing dynamic, so probably not. |  |
| |
| Anyone running an e-comm site using php? on 14:08 - Oct 21 with 297 views | giant_stow |
| Anyone running an e-comm site using php? on 14:07 - Oct 21 by Guthrum |
Was trying to work out if my website used php. A lot of the info online is very unclear.
However, I built it by hand using HTML & CSS, with nothing dynamic, so probably not. |
The web server might use it, but if your site is just static, you're probably good. | |
| |
| Anyone running an e-comm site using php? on 14:15 - Oct 21 with 285 views | Guthrum |
| Anyone running an e-comm site using php? on 14:08 - Oct 21 by giant_stow |
The web server might use it, but if your site is just static, you're probably good. |
Mostly just text-based genealogy stuff, with a few external links. | |
| |
| Anyone running an e-comm site using php? on 16:21 - Oct 21 with 138 views | MJallday |
| Anyone running an e-comm site using php? on 13:57 - Oct 21 by DanTheMan |
Oof, this must be nasty if they are warning ahead of the CVE release. Most I can find is remote code execution which is never a good sign... |
this has been floating around work today.
they seem to think its a gaping wide door into any systems. the bit they're forgetting is that a lot of other things need to have failed before you can exploit this one - and it will be patched pretty much instantly before any harm is done.
however ,the cyber n00bs are cr@pping their pants about it. i suppose it gives them something to do. |  |
| |
| Anyone running an e-comm site using php? on 16:26 - Oct 21 with 129 views | NthQldITFC |
| Anyone running an e-comm site using php? on 13:57 - Oct 21 by DanTheMan |
Oof, this must be nasty if they are warning ahead of the CVE release. Most I can find is remote code execution which is never a good sign... |
Guessing this is likely to be an exploit found by an AI 'powered' attack?
Glad I'm out of that game now, couldn't handle the responsibility. |  |
| |
| Anyone running an e-comm site using php? on 16:38 - Oct 21 with 105 views | DanTheMan |
| Anyone running an e-comm site using php? on 16:21 - Oct 21 by MJallday |
this has been floating around work today.
they seem to think its a gaping wide door into any systems. the bit they're forgetting is that a lot of other things need to have failed before you can exploit this one - and it will be patched pretty much instantly before any harm is done.
however ,the cyber n00bs are cr@pping their pants about it. i suppose it gives them something to do. |
Our SaaS HR software has taken their whole app offline...
We don't have any details yet do we? Or at least I've not seen anything official. | |
| |
| |
By continuing to use the site, you agree to our use of cookies and to abide by our Terms and Conditions.
