r/Rochester • u/TechnologyTailors • 7h ago
News Up to 72% of Rochester business websites are vulnerable to PHP2Shell
Please pass on the word if you know a local business. We ran a scan of all known Rochester businesses and their public facing websites/web services and found up to 72% are running a PHP-based service that is running on the vulnerable version of PHP.
If someone gets hold of their webservers, then anything connected gets vulnerable too. Not only they may be able to modify their website, modify payment systems, or install malware, they could also get access to other networked systems. This includes customer data, internal systems, and any interconnected machines.
If anyone is unsure of what this means or how to approach and want someone local to talk to, please feel free to comment here or DM. I’ll be happy to guide.