PHP2Shell: the PHP flaw hiding in hotel phones, networks and sites
Two actively exploited PHP engine flaws reach hotel appliances, networks and booking sites. Vendor status, plus a remediation plan hotels can run.
Oct 30, 20265 min read
Weaknesses in PMS, point of sale, booking engines and connected equipment, with fixes and context explained.
Two actively exploited PHP engine flaws reach hotel appliances, networks and booking sites. Vendor status, plus a remediation plan hotels can run.
CVE-2018-2957 and CVE-2023-22087 hit Oracle OPERA, a leading hotel PMS. From data exposure to full takeover: what the patch cadence means for hotel IT.