PHP

A serious remote command execution vulnerability in the PHP-FGM module when used with NGINX has been disclosed in CVE  CVE-2019-11043. Since NGINX does not have a native in-process PHP runtime and uses PHP-FGM instead, the PHP-FGM module is widely used. By submitting a specially crafted (yet simple) HTTP requested to the NGINX server, it is […]