PHP, a server-side programming language widely used around the world, has been exposed to two high-risk security flaws, collectively known as “PHP2Shell”. Under certain conditions, attackers can use related vulnerabilities to achieve remote code execution without authentication, which may cause websites to be tampered with, sensitive information leaked, or even the server crashed. 360 completed vulnerability reproduction and attack path verification as soon as possible, and provided suggestions for fixes. At the same time, 360 announced the free opening of Tulongfeng safety inspection services for enterprise users to help enterprises investigate related risks.

Disclaimer:Webull uses external vendor Google Translation Service for news translations where we endeavour to ensure these are correct, however, we recommend that you please double-check this information accordingly. Webull is not responsible for translation errors or issues.