PHP Vulnerability Responses by Company

Classmethod

Japan-based services
Aliases / services
クラスメソッド / Classmethod / DevelopersIO / AWS WAF
Official website
https://classmethod.jp/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

DevelopersIO guidance (AWS WAF / PHP operations)

Response status
WAF mitigation tests published
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

October22–23 articles evaluate AWS WAF mitigations and explain rule versions, body inspection limits and false positives.

Scope: These are technical publications, not confirmation that all Classmethod customer systems were patched.

What users should do

Check rule versions, inspection scope and logs, and update PHP to a fixed release.

Official service URL

Source URLs

  1. Classmethod: WAF rule testing 1https://dev.classmethod.jp/articles/aws-waf-php2shell-body-managed-rule/Response evidence
  2. Classmethod: WAF rule testing 2https://dev.classmethod.jp/articles/aws-security-bulletin-php2shell-waf-rules/Service and operation documentation
Related official sources
  1. Classmethod: WAF rule testing 1Official information directory
  2. Classmethod: WAF rule testing 2Official information directory

Comments