The attackers can use Msupedge to execute various commands ... This security flaw bypasses protections implemented by the PHP team for CVE-2012-1823, which was exploited in malware attacks ...

Set the new index.php file as the default Web page. With an IIS Web host, you must use the host's custom interface to set the default Web page. With an Apache Web host, you can set the default Web ...