Security Flaws Endanger Large Number of Websites

PHP has issued urgent security updates to fix two serious vulnerabilities that allow attackers to execute remote code on website servers without needing to log in. The vulnerabilities, known as "PHP2Shell," relate to how the PHP language handles memory during request processing. They have been exploited in attack attempts targeting sites that use content management platforms, as PHP is widely employed to run over 70% of websites worldwide. The necessary updates include versions PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Users are advised to check with their hosting providers to install these updates, as updating external software like WordPress does not fix the vulnerabilities in PHP itself. Security companies such as Cloudflare and Wiz have observed attacks targeting their networks. While applying these updates is the most reliable way to prevent exploitation of the vulnerabilities, there is a warning that such attacks could disable websites, leak sensitive information, or allow remote malicious software to be executed.

articleDetails.fontSize.sizeحجم النص

تنويه: هذا ملخص تم إنشاؤه بواسطة الذكاء الاصطناعي

عرض المقال بالكامل