China Issues Warning Over PHP Vulnerabilities, Recommends Upgrades and Protection Measures

The Chinese government has also issued a security warning regarding the programming language PHP, which has exposed security vulnerabilities, urging users to carry out prompt updates.

China's National Vulnerability Database of Information Security (NVDB), operated by the Ministry of Industry and Information Technology, announced via social media today (October 22) that monitoring results indicate two critical remote code execution vulnerabilities exist in PHP, posing a severe risk.

The NVDB explained that unauthenticated attackers could exploit these vulnerabilities to remotely execute arbitrary code, leading to damages such as server control takeover, sensitive information leakage, and service disruptions.

The NVDB recommended that relevant institutions and users conduct comprehensive inspections and take temporary protective measures, such as upgrading to the latest version, suspending services, isolating networks, and restricting access.

PHP is a widely used programming language for web development and is often referred to as the backbone of the web.

PHP powers approximately 70% of all websites worldwide, including popular platforms such as WordPress and Wikipedia's MediaWiki.

Government agencies in some European countries, including the Netherlands and Finland, have suspended website operations as a preventive measure, while cybersecurity authorities in South Korea, Europe, Japan, and Australia have also recommended emergency updates.

(Photo: Capture of NVDB social media account, Yonhap News)
※ Please note: This article was translated by AI and may contain errors.