Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
Celah PHP2Shell Ancam Website, Pengelola Wajib Waspada
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T232528Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Lampost (Indonesian), 23 October: the PHP2Shell hole is a warning to site managers not to ignore server security updates. Two critical PHP vulnerabili...
What it says, as the collector read it
Celah PHP2Shell Ancam Website, Pengelola Wajib Waspada
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page id/news/lampost/teknologi-celah-php2shell-ancam-website, snapshot 20261023T232528Z. Copied byte for byte; every file's sha256 is in captures/20261023T232528Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Lampost (Indonesian), 23 October: the PHP2Shell hole is a warning to site managers not to ignore server security updates. Two critical PHP vulnerabilities could let an attacker run code remotely without logging in to a user account first.
> Dua kerentanan kritis pada PHP berpotensi membuka jalan bagi penyerang untuk menjalankan kode dari jarak jauh tanpa harus masuk melalui akun pengguna terlebih dahulu.
_Curator's translation:_ "Two critical vulnerabilities in PHP could open the way for attackers to run code remotely without first having to log in through a user account."
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Celah PHP2Shell Ancam Website, Pengelola Wajib Waspada". Selected mechanically, not read by a person.
Capture notes
Language id. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261023T232528Z · HTTP 200 · https://lampost.co/teknologi/celah-php2shell-ancam-website
headers.jsonab145f320367ec1070bda11dea36b4cfe3bd0f3f8708dba9b0add8d4a0dc0190 742 bytespage.htmlec31fb32e02215dc1010bd590f25e05f5001139941d6b991ff14d7b808283003 61,494 bytesprovenance.json88a31d9a3626af863af563f3ecbf579dfbf4166fc8e65d8a777c0e057d86e946 1,639 bytesrendered.html6de9dd269ef67db567de3ef7259fc81c5cd9f98c9f36d267a7b72318cf117217 847,790 bytesscreenshot.jpgef8492581922c119897f357d841a09b4afa6c133a52038f6d7978cf19d9ffa2e 714,490 bytestext.txtf92f07ed7bfdde52c620728b8dc214ec3bef74dee3c8ed5578ff2b7af45f02ad 8,115 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →