로그프레소, PHP 원격 코드 실행 취약점 진단 ‘PHP2Shell 스캐너’ 앱 공개 < IT&과학 < 기사본문 - 디지털경제뉴스

로그프레소, PHP 원격 코드 실행 취약점 진단 ‘PHP2Shell 스캐너’ 앱 공개 < IT&과학 < 기사본문 - 디지털경제뉴스

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page kr/news/denews/news-articleview-html, snapshot 20261026T071149Z. Copied byte for byte; every file's sha256 is in captures/20261026T071149Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Digital Economy News (Korean), 26 October, by Park Si-hyun: the security firm Logpresso released a 'PHP2Shell Scanner' app in its Logpresso Store, to be installed in its SIEM/XDR and run against registered URLs, including internal-network PHP assets (management tools, firewalls) that internet-based scanners cannot reach. It logs each asset's result and PHP version, allows re-scanning after patching and CSV export, and ships detection queries and rules. It recaps the two CVEs (9.2), the fixed versions (8.2.35, 8.3.36, 8.4.27, 8.5.12) and says versions from 5.4.0 (2012) are reported affected. Noted as material only: the vault does not run such tools.

> 로그프레소는 PHP 원격 코드 실행 취약점 ‘PHP2Shell’을 진단하는 ‘PHP2Shell 스캐너’ 앱을 로그프레소 스토어에 공개했다.

_Curator's translation:_ "Logpresso has released, in the Logpresso Store, a 'PHP2Shell Scanner' app that diagnoses the PHP remote code execution vulnerability 'PHP2Shell'."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "로그프레소, PHP 원격 코드 실행 취약점 진단 ‘PHP2Shell 스캐너’ 앱 공개 < IT&과학 < 기사본문 - 디지털경제뉴스". Selected mechanically, not read by a person.

Capture notes

Language ko. The footer carries a copyright line ('무단전재 및 재배포, AI학습 및 활용 금지': no reproduction, redistribution, or AI training or use). It is a rights notice, not an instruction to act; recorded here and flagged to the editor. Nothing else addresses an AI or hides text from a reader.