# Source: Mengenal PHP2Shell, Celah Kritis di Bahasa Pemrograman yang Menghidupi 70% Situs Dunia

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Sindonews Tekno: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Mengenal PHP2Shell, Celah Kritis di Bahasa Pemrograman yang Menghidupi 70% Situs Dunia

**Sindonews Tekno** · [https://tekno.sindonews.com/read/1763797/207/mengenal-php2shell-celah-kritis-di-bahasa-pemrograman-yang-menghidupi-70-situs-dunia-1792725003](https://tekno.sindonews.com/read/1763797/207/mengenal-php2shell-celah-kritis-di-bahasa-pemrograman-yang-menghidupi-70-situs-dunia-1792725003) · published not stated in the capture · added by `curator@php.newsroom` · slug `tekno-sindonews-read-1763797-207-mengenal-php2shell-cela`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261029T121438Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). A short Indonesian tech-news explainer (Sindonews Tekno): two critical flaws in PHP, used by nearly 70% of websites whose server-side language is know...

## What it says, as the collector read it

#### Mengenal PHP2Shell, Celah Kritis di Bahasa Pemrograman yang Menghidupi 70% Situs Dunia

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `id/news/tekno-sindonews/read-1763797-207-mengenal-php2shell-celah-kritis-di-bahasa-p`, snapshot `20261029T121438Z`. Copied byte for byte; every file's sha256 is in `captures/20261029T121438Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

A short Indonesian tech-news explainer (Sindonews Tekno): two critical flaws in PHP, used by nearly 70% of websites whose server-side language is known, led some European government sites to be switched off temporarily on Wednesday 21 October, and the US National Security Agency asked organisations to patch immediately or turn off their servers. It names the two CVEs and the 9.2 CVSS 4.0 score and says the flaw is in PHP itself, so even well-written application code is exposed, citing Wiz Research that even a simple 'Hello World' app on a vulnerable PHP version can be attacked.

> Badan Keamanan Nasional Amerika Serikat (NSA) juga meminta organisasi segera memasang patch atau mematikan servernya.

_Curator's translation:_ "The US National Security Agency (NSA) also asked organisations to install the patch immediately or switch off their servers."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Mengenal PHP2Shell, Celah Kritis di Bahasa Pemrograman yang Menghidupi 70% Situs Dunia". Selected mechanically, not read by a person.

#### Capture notes

Language `id-ID`. The capture shows no publication date; the text refers to Wednesday 21 October. Sidebar headlines of related Sindonews articles (on Indonesian servers and government sites) are not themselves captured here and are not recorded. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261029T121438Z · HTTP 200 · https://tekno.sindonews.com/read/1763797/207/mengenal-php2shell-celah-kritis-di-bahasa-pemrograman-yang-menghidupi-70-situs-dunia-1792725003- `headers.json` 52980d5ec9cf42ab0d74ff688695b54c5610154d7d449f71e72982a7c8a6a0b7 1,015 bytes
- `page.html` 04eadf41ce2ca036d198d03eb187bffddadc5711dbc781fec84bb4c667be2085 143,022 bytes
- `provenance.json` c30e90b69d9d1679388ec16e8255fa6a34f4de37e523f3dcfde6bd93028212f7 1,901 bytes
- `rendered.html` ef80d740af7d256f397ac68cc38e9894d9514be5fda355ddcb7da6a15ce20e53 156,302 bytes
- `screenshot.jpg` d76565a7a48f6096392ad0e3d8d4fcab8e88836f67059ae61d201a5df1dcd166 318,958 bytes
- `text.txt` 193089bdad8d004b7c32b8b3229826a85fa340756a4176b8af30223c641e5cfe 4,411 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.54 · data as of 2026-10-29T17:13Z · vault commit cd9375f1aefd · https://refs.php.oct.2026.newsroom.sgit.ai/sources/tekno-sindonews-read-1763797-207-mengenal-php2shell-cela/index.html