← Back to context

Comment by nickysielicki

2 hours ago

Docker images from Wordpress, joomla, and drupal were all exploitable.

https://www.wiz.io/blog/php2shell-php-rce

Article's very vague about how the RCE actually works. They talk about the memory corruption bugs but not how exactly those become RCE.

Name a more iconic trio when it comes to exploits.

  • But these communities all patched it immediately too. Does that not say something about the iconic trio when it comes to responsiveness?

  • Not a trio, but Magento beats all of these 3 combined when it comes to being an exploitable POS.