PHP: The three little letters wreaking havoc across the web
摘要
PHP是一种被大量网站使用的编程语言，近期被发现存在两个安全漏洞，影响范围广泛，涉及维基百科、WordPress、Drupal等平台，部分网站因此暂时下线。漏洞存在于近20年来几乎所有PHP版本中，其中许多版本已不再受支持，导致一些缺乏维护的旧网站和服务面临风险，甚至被迫永久关闭。相关事件被安全公司Wiz称为软件史上最严重的漏洞之一，互联网档案馆及两款日本老
Two vulnerabilities found in the programming language PHP put enormous swaths of the internet in danger.
By some accounts, up to 70 percent of websites use PHP in some capacity. It powers Wikipedia, WordPress, Drupal, and a host of other popular sites and platforms, including DeviantArt and 4Chan, which were temporarily shut down after the vulnerabilities were disclosed. Even governments weren’t immune.
But it’s not as simple as updating a few servers. The vulnerability exists in every version of PHP dating back roughly 20 years, many of which are no longer supported. That means some older sites and services that are no longer actively maintained are at risk, leaving them with little option but to permanently shut down.
Here’s all the latest developments in what security firm Wiz has called “among the most severe vulnerabilities discovered … in software history.”
- The Internet Archive was briefly forced offline because of PHP.
- Two old-school Japanese mobile games are shutting down over the PHP exploit.
- The PHP2Shell exploit hit Cloudflare hard.
- PHP: The three letters that shut down sites all over the internet today
- GPT‑5.6 Sol was used to identify critical PHP flaw.
- A critical PHP vulnerability may take websites down today
转载信息
评论 (0)
暂无评论，来留下第一条评论吧