Data Expedition, Inc.
News
Articles, events, announcements, and blogs
Data Expedition, Inc.
News
Articles, events, announcements, and blogs
PHP2Shell is a critical Remote Code Execution vulnerability which has been discovered in all recent versions the PHP web scripting language. PHP may be installed on servers as a stand-alone command-line package or as a module inside the web server. Any web server hosting any PHP scripts is vulnerable until PHP is updated.
If you have installed any of the ExpeDat PHP web templates, you must update PHP immediately. Take care to update and enable the version of PHP that is used by the web server, not just the command-line version of PHP. You can verify which version of PHP your web server is using by installing a small PHP script such as:
<?php phpinfo(); ?>
Note that the PHP Group is providing updates only for PHP 8.2, 8.3, 8.4, and 8.5. If you are running an older operating system which does not support these PHP versions, you may first need to update your operating system.
Older versions of the ExpeDat PHP web templates may not be compatible with PHP 8. If you experience problems with an ExpeDat web template after updating PHP, please contact support@dataexpedition.com .
—— Updated October 26, 2026
Users of CloudDat for AWS Marketplace should log into the instance and update the PHP installation. For recent CloudDat versions based on Amazon Linux 2023, follow these instructions:
https://alas.aws.amazon.com/AL2023/ALAS2023-2026-3301.html
MTP/IP executables, including servedat, do not use or depend on PHP and do not require updating.