Cloudflare Shields PHP Sites from php2shell Exploits
Cloudflare deploys protections against php2shell vulnerability
Cloudflare has rolled out new Web Application Firewall rules to block attacks exploiting the php2shell vulnerability, a flaw that can let attackers run arbitrary code on PHP servers. The managed rules are now live for all customers, requiring no configuration, and target the specific request patterns used in php2shell exploits. Cloudflare urges PHP site owners to patch their servers while relying on the WAF as a stopgap.
The php2shell vulnerability allows attackers to execute arbitrary code on vulnerable PHP servers, and Cloudflare's new managed rules are designed to block these attacks before they reach your origin.