Quote:
Originally Posted by chants
Given exetools is on vBulletin which uses PHP, admins should be notified as this is pretty severe.
|
Forum is behind Cloudflare.
Although updating is good, we are already protected to a large extent even if we do not update in a hurry. We already have the upstream protection from CF.
Official blog:
Quote:
|
https://blog.cloudflare.com/php-vulnerabilities-waf-protection/
|
"
Cloudflare has developed and deployed web application firewall (WAF) protections since early October 2026, which were deployed about 9 hours ahead of public disclosure. Starting on October 21 3:02 am UTC, Cloudflare customers using our free or paid WAF were protected by default against php2shell."