The attackers can use Msupedge to execute various commands ... This security flaw bypasses protections implemented by the PHP team for CVE-2012-1823, which was exploited in malware attacks ...

XAMPP for Windows had yet to release a fix at the time this post went live. For admins without the need for PHP CGI, they can turn it off using the following Apache HTTP Server configuration: ...

Set the new index.php file as the default Web page. With an IIS Web host, you must use the host's custom interface to set the default Web page. With an Apache Web host, you can set the default Web ...