Two critical vulnerabilities in PHP nearly caused a global internet crisis.
- Major Security Flaws Discovered in PHP Technology Reports have revealed two critical security vulnerabilities in the widely used PHP technology for website development.
- This access enables them to steal or modify data and take control of targeted systems.
- The proactive step aimed to protect systems before the public disclosure of the security flaws.
- Ongoing Risks Despite Mitigation Efforts Although authorities have successfully reduced the risks associated with these vulnerabilities so far, researchers warned that outdated systems still exist worldwide.
Major Security Flaws Discovered in PHP Technology
Reports have revealed two critical security vulnerabilities in the widely used PHP technology for website development. Exploiting these flaws could have led to a wave of breaches affecting millions of websites and servers globally.
Details of the Vulnerabilities
The vulnerabilities, known as “PHP2Shell,” allow attackers to execute commands remotely and access systems running PHP without needing login credentials or passwords. This access enables them to steal or modify data and take control of targeted systems.
PHP Foundation Responds with Security Updates
The PHP Foundation announced the release of security updates to address these vulnerabilities. This initiative involved collaboration with major technology companies and hosting service providers. The proactive step aimed to protect systems before the public disclosure of the security flaws.
Cybersecurity Experts Weigh In
Cybersecurity experts highlighted the severity of these vulnerabilities due to the widespread use of PHP technology. A significant number of websites and popular platforms, including WordPress, Drupal, Joomla, and Wikipedia, rely on PHP.
Ongoing Risks Despite Mitigation Efforts
Although authorities have successfully reduced the risks associated with these vulnerabilities so far, researchers warned that outdated systems still exist worldwide. These systems remain vulnerable to breaches and cyberattacks in the near future.
Emphasizing the Need for Enhanced Security Measures
Experts confirmed that this incident underscores the security challenges facing internet infrastructure. They stressed the need for continuous updates and enhanced protective measures to combat the increasing cyber threats.
To follow the news in Arabic
