China also warns of risk of ‘PHP flaw’… Upgrade/protection measures recommended

(Beijing = Yonhap News) Correspondent Jeong Seong-jo = The Chinese government also issued a security warning regarding the programming language PHP, which revealed security vulnerabilities, and recommended users to update quickly.

China's Ministry of Industry and Information Technology's Internet Security Threat and Vulnerability Information Sharing Platform (NVDB) announced on social media on the 22nd, "As a result of monitoring, it was determined that two remote code execution ultra-high risk vulnerabilities exist in PHP and the risk is serious."

NVDB then explained, “An unauthenticated attacker can exploit this to remotely execute arbitrary code, and damage such as theft of server control, leakage of sensitive information, and service interruption may occur.”

NVDB recommended that relevant organizations and users conduct a full inspection and take temporary protective measures such as upgrading to the latest version, service interruption, network isolation, and access restrictions.

PHP is a programming language widely used in web development, and is often called the 'backbone of the web'. PHP powers approximately 70% of all websites in the world, including popular platforms such as WordPress and Wikipedia's MediaWiki.

Government agencies in some European countries, including the Netherlands and Finland, suspended website operations as a precaution, and cybersecurity authorities in Korea, Europe, Japan, and Australia also recommended urgent updates.