⚠ php2shell critical PHP RCE · patched in 8.2.35+ 8.3.36+ 8.4.27+ 8.5.12+ · 372 NotResolved →
485 sites · Resolved 111 · NotResolved 372 · No action needed 2
| Site URL | PHP version | Type | Status | CMS | Contact | Last checked | |
|---|---|---|---|---|---|---|---|
| elsa.org.et | PHP 8.3.35 | et_tld high | NotResolved | WordPress | info@elsa.org.et | 2026-10-22 09:28 | |
| evidence: X-Powered-By: PHP/8.3.35 (https://elsa.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| epaethiopia.org.et | Hidden | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:28 | |
| evidence: Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| ethiojobs.org.et | PHP 7.4.33 | et_tld high | NotResolved | — | — | 2026-10-22 09:27 | |
| evidence: X-Powered-By: PHP/7.4.33 (https://ethiojobs.org.et/) | region: et_tld:domain ends in .et | |||||||
| ecae.org.et | PHP 8.2.34 | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:27 | |
| evidence: X-Powered-By: PHP/8.2.34, PleskLin (https://ecae.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| ethada.org.et | PHP 7.4.33 | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:27 | |
| evidence: X-Powered-By: PHP/7.4.33 (https://ethada.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| ethiopianmajlis.org.et | PHP 8.1.34 | et_tld high | NotResolved | WordPress | info@ethiopianmajlis.org.et | 2026-10-22 09:27 | |
| evidence: X-Powered-By: PHP/8.1.34 (https://ethiopianmajlis.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| esep.org.et | Hidden | et_tld high | NotResolved | Laravel | — | 2026-10-22 09:27 | |
| evidence: Set-Cookie: Laravel session | region: et_tld:domain ends in .et | |||||||
| ecydo.org.et | Hidden | et_tld high | NotResolved | WordPress | ecyuaethiopia@yahoo.com +1 | 2026-10-22 09:27 | |
| evidence: Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| brightvisionhopevillage.org.et | PHP 8.3.35 | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:27 | |
| evidence: X-Powered-By: PHP/8.3.35, PleskLin (https://brightvisionhopevillage.org.et/) · Link: WordPress REST API · Set-Cookie: PHPSESSID · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| ecfe.org.et | Hidden | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:26 | |
| evidence: Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| cbmp.org.et | PHP 8.1.34 | et_tld high | NotResolved | WordPress | info@cbmp.org.et | 2026-10-22 09:26 | |
| evidence: HTML: WordPress markers · X-Powered-By: PHP/8.1.34 (/index.php) | region: et_tld:domain ends in .et | |||||||
| dda.org.et | PHP 7.2.34 | et_tld high | NotResolved | WordPress | ketesema@yahoo.com | 2026-10-22 09:26 | |
| evidence: X-Powered-By: PHP/7.2.34, PleskLin (https://dda.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| cerprosperity.org.et | PHP 8.2.35 | et_tld high | Resolved | Drupal | info@cerprosperity.gov.et | 2026-10-22 09:26 | |
| evidence: X-Powered-By: PHP/8.2.35, PleskLin (https://cerprosperity.org.et/) · HTML: Drupal markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| orbit.et | PHP 8.3.35 | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:26 | |
| evidence: X-Powered-By: PHP/8.3.35 (https://orbit.et/) · Link: WordPress REST API · HTML: WordPress markers · HTML: same-site link/form to https://orbit.et/wp-login.php?action=lostpassword&redirect_to=https%3A%2F%2Forbi… | region: et_tld:domain ends in .et | |||||||
| dida.org.et | PHP 8.2.35 | et_tld high | Resolved | WordPress | — | 2026-10-22 09:26 | |
| evidence: X-Powered-By: PHP/8.2.35, PleskLin (https://dida.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| dubaf.org.et | PHP 8.1.34 | et_tld high | NotResolved | — | — | 2026-10-22 09:26 | |
| evidence: X-Powered-By: PHP/8.1.34, PleskLin (https://dubaf.org.et/) · HTML: same-site link/form to index.php | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| aese.org.et | PHP 7.4.33 | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:26 | |
| evidence: X-Powered-By: PHP/7.4.33 (https://aese.org.et/) · X-Powered-By: PHP/7.4.33 (https://www.aese.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| beteseb.org.et | PHP 8.3.36 | et_tld high | Resolved | — | — | 2026-10-22 09:26 | |
| evidence: X-Powered-By: PHP/8.3.36, PleskLin (https://www.beteseb.org.et/) · Set-Cookie: PHPSESSID · HTML: same-site link/form to index.php | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| ada.org.et | PHP 7.3.33 | et_tld high | NotResolved | Laravel | — | 2026-10-22 09:26 | |
| evidence: X-Powered-By: PHP/7.3.33 (https://ada.org.et/) · Set-Cookie: Laravel session | region: et_tld:domain ends in .et | |||||||
| abjol.org.et | PHP 8.3.35 | et_tld high | NotResolved | — | — | 2026-10-22 09:25 | |
| evidence: X-Powered-By: PHP/8.3.35 (https://abjol.org.et/) | region: et_tld:domain ends in .et | |||||||