{"uuid": "936bfe6e-1466-4dc0-9976-3f5c5c818218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2019-11043", "type": "exploited", "source": "https://t.me/information_security_channel/32110", "content": "A new recently patched remote code execution bug in PHP7 lets hackers hijack the websites running on some NGINX and php-fpm configurations. The vulnerability can be tracked as CVE-2019-11043. The vulnerability resides in env_path_info in the file fpm_main.c of the FPM component. The FPM is the php-fpm module used for performance enhancement. The manipulation of [\u2026]\nThe post PHP7 Remote Code Execution Bug Let Hackers Hijack Websites Running On NGINX Servers (https://gbhackers.com/php7/) appeared first on GBHackers On Security (https://gbhackers.com/).", "creation_timestamp": "2019-10-28T10:32:12.000000Z"}