2:18:01Too young :_jellySmug::_jellySmug::_jellySmug:
2:18:07so what did Jelly hack into?
2:18:09The server running the site, yeah
2:18:20that was jelly's mom who is 35
2:18:22It's basically a PHP to Shell vulnerability. It allows you to get shell on the target.
2:18:28oh it's like a code injection exploit?
2:18:44Lots of routers and firewalls use PHP....
2:18:48it can execute arbitrary code on the server, including getting you a shell
2:18:48it sounds like a house of cards tbh
2:18:52they need to get their security together
2:18:55I read they can get into databases
2:18:57You can have it give you full access to a site
2:18:59:_jellyAliceStare::_jellyAliceStare::_jellyAliceStare:
2:19:02that's one hell of a vulnerability
2:19:14Lots of web scripting stuff is a mess tbh
2:19:17Remote code execution, you can put anything on the host. Get anything from them, serve anything through them.
2:19:20Those words sound really bad.
2:19:23sad thing about this is we lost Old sites that are no longer being updated from the 2010s
2:19:30they found a new one already
2:19:37its either patched or toast at this point