AI uncovers PHP2Shell, a critical PHP vulnerability affecting millions of websites
An AI-assisted investigation identified PHP2Shell, a vulnerability in PHP, the language used by up to 70% of the world's websites. The flaw affects memory management and could allow attackers to execute unauthorized code on unpatched servers. The finding occurred in August, when a researcher at the security firm California was examining PHP's source code with an OpenAI model. The United States, Japan and Europe took preventive measures.
In 40 seconds
- The flaw, called PHP2Shell, affects PHP's memory management and could allow unauthorized code execution on unpatched servers.
- The finding came in August during an audit using an OpenAI AI model, part of an OpenAI-funded initiative to review open-source software.
- Volker Dusch, an engineer at the foundation that maintains PHP, compared it to Heartbleed and called it the most serious problem in more than a decade.
IASummary generated by artificial intelligence from a story by BioBioChile. It may contain errors: the original source prevails.




Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.