Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
PHP2Shell 波及数百万台服务器，所用 PHP 版本无官方修复补丁 - Notebookcheck-cn.com News
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261026T094033Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Notebookcheck China edition (Chinese, DeepL translation of Darryl Linington's article), 26 October: the same article recorded in French as notebookche...
What it says, as the collector read it
PHP2Shell 波及数百万台服务器，所用 PHP 版本无官方修复补丁 - Notebookcheck-cn.com News
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page hk/news/notebookcheck-cn/php2shell-php-1433819-0-html, snapshot 20261026T094033Z. Copied byte for byte; every file's sha256 is in captures/20261026T094033Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Notebookcheck China edition (Chinese, DeepL translation of Darryl Linington's article), 26 October: the same article recorded in French as notebookcheck-php2shell-laisse-des-millions-de-serveur (Shodan counts of about 884,000 exposed hosts on unsupported PHP, banner-based; minimal backports only for 7.4, 8.0 and 8.1; version strings can mislead; CISA advice to take unpatched PHP systems offline). The claims are recorded on the French edition.
> PHP2Shell 的修复仅覆盖 PHP 8.2 至 8.5，这意味着大量面向互联网的 PHP 主机所运行的版本从未获得包含修复的官方发行版。
_Curator's translation:_ "The PHP2Shell fixes cover only PHP 8.2 to 8.5, which means a large number of internet-facing PHP hosts run versions that never received an official fix release."
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell 波及数百万台服务器，所用 PHP 版本无官方修复补丁 - Notebookcheck-cn.com News". Selected mechanically, not read by a person.
Capture notes
Language cn. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261026T094033Z · HTTP 200 · https://www.notebookcheck-cn.com/PHP2Shell-PHP.1433819.0.html
headers.json8f10e4c35946cd0b2212286160701084c7b8e245612c08d07baf17d052e79ecf 983 bytespage.htmlbdd1e960e6bd4b32572c1f15188d9af84422bec1d68a1301fd16256561c0faea 105,695 bytesprovenance.json255ee9a1e5f7756842bb57e442f43afe7f253901c9699b218cee21bfa3512e8f 1,690 bytesrendered.htmlb40ef69529e009f370e7627db019b6ffccbd24882b574efe1caa101c5f80c98e 116,097 bytesscreenshot.jpg93ca2731d4ac0e5a9382e5d121c6098494bef0894ecbdf8ccf6a0361e6ef3061 315,425 bytestext.txtfd81eb1c26ed745aeb4359a460f2818de48e0b21fc6ae026047042ff79a409ee 5,726 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →