# Source: 엔키화이트햇, 'PHP2Shell' 취약점 무료 진단 도구 공개 - 전자신문

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

전자신문: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# 엔키화이트햇, 'PHP2Shell' 취약점 무료 진단 도구 공개 - 전자신문

**전자신문** · [https://www.etnews.com/20261023000089](https://www.etnews.com/20261023000089) · published 2026-10-23T10:29:05+09:00 · added by `curator@php.newsroom` · slug `etnews-20261023000089`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261026T071149Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Electronic Times (Korean), 23 October: the Korean firm Enki WhiteHat released a free diagnostic scanner and a vulnerability analysis report on PHP2She...

## What it says, as the collector read it

#### 엔키화이트햇, 'PHP2Shell' 취약점 무료 진단 도구 공개 - 전자신문

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `kr/news/etnews/20261023000089`, snapshot `20261026T071149Z`. Copied byte for byte; every file's sha256 is in `captures/20261026T071149Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Electronic Times (Korean), 23 October: the Korean firm Enki WhiteHat released a free diagnostic scanner and a vulnerability analysis report on PHP2Shell. The scanner checks the PHP version and related settings to give a first judgement of exposure, without using attack code; users enter a URL on a diagnostic site with no login. The report covers how the flaw arises, affected versions, mitigations and how to apply the official patch (8.5.12, 8.4.27, 8.3.36, 8.2.35); the firm plans to publish more on exposed-asset management. Noted as material only: the vault does not run such tools.

> 엔키화이트햇은 실제 공격 코드를 사용하지 않고 PHP 버전과 관련 설정을 확인해 취약점 노출 가능성을 1차 판별하는 스캐너를 개발했다.

_Curator's translation:_ "Enki WhiteHat developed a scanner that, without using actual attack code, checks the PHP version and related settings to make a first judgement of vulnerability exposure."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "엔키화이트햇, 'PHP2Shell' 취약점 무료 진단 도구 공개 - 전자신문". Selected mechanically, not read by a person.

#### Capture notes

Language `ko`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261026T071149Z · HTTP 200 · https://www.etnews.com/20261023000089- `headers.json` 5033ae0c9dc914153d76f08d620ddba93afc50df52578ef751688f3c6fa72339 205 bytes
- `page.html` b274817afad90b7cabd6e2ec2e22a6bad81e4ee8d4f16cf631f2b63fce69bcef 52,413 bytes
- `provenance.json` 66fb0d499d4e2afab68bf5559cd5f2e16f2279e66784e15b996514b8517e547e 1,548 bytes
- `rendered.html` b3d96f3f190a8f024122825de73758f3c4adc63e9b1b1db5714c735c1e189bb9 79,448 bytes
- `screenshot.jpg` 29db8f38436078a6712b932c7e9bc69aeb4c0a2f493ed1af6b09efed82388f63 356,547 bytes
- `text.txt` e4c16a5b8242d2abef7b2f840ad3c983470265a64cfd8c9720ef0087938dc7a9 7,946 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.36 · data as of 2026-10-26T17:09Z · vault commit 1dceaa1dfa7f · https://refs.php.oct.2026.newsroom.sgit.ai/sources/etnews-20261023000089/index.html