⚠ php2shell critical PHP RCE · patched in 8.2.35+ 8.3.36+ 8.4.27+ 8.5.12+ · 372 NotResolved →
372 sites · Resolved 111 · NotResolved 372 · No action needed 2
| Site URL | PHP version | Type | Status | CMS | Contact | Last checked | |
|---|---|---|---|---|---|---|---|
| wustaff.edu.et | PHP 8.3.35 | manual search high | NotResolved | Laravel | — | 2026-10-22 12:00 | |
| evidence: X-Powered-By: PHP/8.3.35, PleskLin (https://wustaff.edu.et/) · Set-Cookie: Laravel session | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| stickerguy.et | PHP 8.1.34 | et_tld high | NotResolved | WordPress | — | 2026-10-22 11:50 | |
| evidence: X-Powered-By: PHP/8.1.34 (https://stickerguy.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| humedica.et | Hidden | et_tld high | NotResolved | WordPress | — | 2026-10-22 11:10 | |
| evidence: Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| hubrock.et | PHP 7.4.33 | et_tld high | NotResolved | WordPress | — | 2026-10-22 11:09 | |
| evidence: X-Powered-By: PHP/7.4.33 (https://hubrock.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| eticpa.et | Hidden | et_tld high | NotResolved | WordPress | — | 2026-10-22 10:45 | |
| evidence: Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| cpucollege.edu.et | Hidden | et_tld medium | NotResolved | WordPress | — | 2026-10-22 10:42 | |
| evidence: HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| allianceacademy.edu.et | Hidden | et_tld medium | NotResolved | Drupal | info@vitaco-demo.com | 2026-10-22 10:41 | |
| evidence: HTML: Drupal markers | region: et_tld:domain ends in .et | |||||||
| bmc.edu.et | PHP 7.4.33 | et_tld high | NotResolved | WordPress | — | 2026-10-22 10:41 | |
| evidence: X-Powered-By: PHP/7.4.33 (https://bmc.edu.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| ctc.edu.et | PHP 8.1.34 | et_tld high | NotResolved | WordPress | info@ctc.edu.et | 2026-10-22 10:40 | |
| evidence: X-Powered-By: PHP/8.1.34 (https://ctc.edu.et/) · Link: WordPress REST API · HTML: WordPress markers · HTML: same-site link/form to https://ctc.edu.et/lms/login/index.php | region: et_tld:domain ends in .et | |||||||
| bru.edu.et | PHP 8.1.34 | et_tld high | NotResolved | WordPress | irc@bru.edu.et | 2026-10-22 10:40 | |
| evidence: X-Powered-By: PHP/8.1.34 (https://bru.edu.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| amtvet.edu.et | Hidden | et_tld high | NotResolved | WordPress | info@amtvet.edu.et | 2026-10-22 10:40 | |
| evidence: Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| addiscontinental.edu.et | Hidden | et_tld high | NotResolved | WordPress | aciph@addiscontinental.edu.et | 2026-10-22 10:40 | |
| evidence: Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| bhu.edu.et | Hidden | et_tld high | NotResolved | WordPress | info@bhu.edu.et | 2026-10-22 10:40 | |
| evidence: HTML: WordPress markers · Link: WordPress REST API · Probe: PHP headers on a missing .php file | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| amchs.edu.et | PHP 8.2.34 | et_tld high | NotResolved | WordPress | — | 2026-10-22 10:40 | |
| evidence: X-Powered-By: PHP/8.2.34 (https://amchs.edu.et/) · Link: WordPress REST API · HTML: WordPress markers · HTML: same-site link/form to https://amchs.edu.et/library/course/index.php | region: et_tld:domain ends in .et | |||||||
| amc.edu.et | PHP 8.1.34 | et_tld high | NotResolved | WordPress | — | 2026-10-22 10:40 | |
| evidence: X-Powered-By: PHP/8.1.34, PleskLin (https://amc.edu.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| amce.edu.et | PHP 7.4.33 | et_tld high | NotResolved | WordPress | amce@gmail.com | 2026-10-22 10:40 | |
| evidence: X-Powered-By: PHP/7.4.33, PleskLin (https://amce.edu.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| adu.edu.et | Hidden | et_tld high | NotResolved | WordPress | info@adu.edu.et | 2026-10-22 10:40 | |
| evidence: Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| 2tgrouplc.et | PHP 8.3.35 | et_tld high | NotResolved | — | info@2tgroup.et | 2026-10-22 10:15 | |
| evidence: X-Powered-By: PHP/8.3.35 (https://2tgrouplc.et/) · Set-Cookie: Joomla-style session · HTML: same-site link/form to /index.php | region: et_tld:domain ends in .et | |||||||
| zezu.et | PHP 8.2.34 | et_tld high | NotResolved | WordPress | info@zezu.et | 2026-10-22 10:14 | |
| evidence: X-Powered-By: PHP/8.2.34 (https://zezu.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| yardim.et | Hidden | et_tld high | NotResolved | Laravel | — | 2026-10-22 10:14 | |
| evidence: Set-Cookie: Laravel session | region: et_tld:domain ends in .et | |||||||