---
title: "All PHP Applications are Vulnerable"
url: https://daily.dev/posts/all-php-applications-are-vulnerable-fnr8la1v3
source_url: https://www.youtube.com/watch?v=u8jLUjpCWrs
type: video:youtube
source: "Mental Outlaw"
published: 2024-04-22T23:52:12.946Z
updated: 2024-04-22T23:52:10.991Z
tags: ["security", "webdev", "vulnerability", "php"]
reading_time: 8
upvotes: 21
comments: 3
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# All PHP Applications are Vulnerable

**[Mental Outlaw](https://daily.dev/sources/mentaloutlaw)** · 8 min read · 21 upvotes · 3 comments

## Summary

A 24-year-old bug in the GBC library can be exploited to take over virtually any PHP application.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.youtube.com/watch?v=u8jLUjpCWrs>

## Community discussion

Top comments from developers on daily.dev.

**@yewolf** · 11 upvotes

> Just a disclaimer for anyone watching, it is not a bug in PHP and only affects you if you convert TO the specific charset (not from), this is unlikely to lead to an RCE and more likely will lead to a DOS

**@n1m4** · 5 upvotes

> https://www.php.net/archive/2024.php#2024-04-24-1

**@friedrich** · 0 upvotes

> This is freaking !
>
> A such dangerous bug found after more than twenty years.

## Similar posts on daily.dev

- [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments
- [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments
- [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments
- [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments
- [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#webdev](https://daily.dev/tags/webdev), [#vulnerability](https://daily.dev/tags/vulnerability), [#php](https://daily.dev/tags/php)

[View this post on daily.dev](https://daily.dev/posts/all-php-applications-are-vulnerable-fnr8la1v3)