Summary

PC2Paper has determined that there is currently no evidence of exposure or compromise
resulting from the PHP2Shell vulnerability.

Details

PC2Paper does not use PHP for our main website or our API’s we do however make use of OS Ticket which is a PHP application and hosted in a separate data centre to our main site for manging support tickets.

On the 21 October 2026 out of an abundance of caution PC2Paper blocked access to our support ticketing system from the Internet so we could asses the situation as part of procedures found in our Information Security Management System.

We pulled down the logs files from the server and analysed them for traces of the PHP2Shell exploit and found none. We then contacted our hosting provider regarding the exploit who advised us they had blocked the signature for the attack at the firewall and that it was not necessary to block access to our support ticketing system as their in-house security team had proactively acted on the announcement made by the PHP team.

If you require further information, please contact us.