엔키화이트햇, 'PHP2Shell' 취약점 무료 진단 도구 공개 - 전자신문

엔키화이트햇, 'PHP2Shell' 취약점 무료 진단 도구 공개 - 전자신문

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page kr/news/etnews/20261023000089, snapshot 20261026T071149Z. Copied byte for byte; every file's sha256 is in captures/20261026T071149Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Electronic Times (Korean), 23 October: the Korean firm Enki WhiteHat released a free diagnostic scanner and a vulnerability analysis report on PHP2Shell. The scanner checks the PHP version and related settings to give a first judgement of exposure, without using attack code; users enter a URL on a diagnostic site with no login. The report covers how the flaw arises, affected versions, mitigations and how to apply the official patch (8.5.12, 8.4.27, 8.3.36, 8.2.35); the firm plans to publish more on exposed-asset management. Noted as material only: the vault does not run such tools.

> 엔키화이트햇은 실제 공격 코드를 사용하지 않고 PHP 버전과 관련 설정을 확인해 취약점 노출 가능성을 1차 판별하는 스캐너를 개발했다.

_Curator's translation:_ "Enki WhiteHat developed a scanner that, without using actual attack code, checks the PHP version and related settings to make a first judgement of vulnerability exposure."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "엔키화이트햇, 'PHP2Shell' 취약점 무료 진단 도구 공개 - 전자신문". Selected mechanically, not read by a person.

Capture notes

Language ko. Nothing in the page addresses an AI or hides text from a reader.