allegation
Two critical vulnerabilities have been confirmed in PHP, distributed under the name PHP2Shell, and they create a risk of remote malicious code execution on the server and unauthorized access to data.
A allegation by Turan Security Xavfsizlik Byulleteni. Statements are as reported by the cited publishers — not verified by DecisionGateway.
PHP’da ikkita kritik zaiflik tasdiqlandi. PHP2Shell nomi bilan tarqalayotgan ushbu zaifliklar serverda masofadan zararli kod bajarish va ma’lumotlarga ruxsatsiz kirish xavfini tug‘diradi.
Related claims
Two security flaws in PHP could allow attackers to execute malicious code remotely.THnewsupdates · allegationThe vulnerability can cause memory corruption, service disruption, and in some cases remote execution of malicious code via specially crafted compressed data.Turan Security Xavfsizlik Byulleteni · statementTuran Security calls on organizations to check their PHP systems, strengthen monitoring and not delay security updates.Turan Security · statementThe vulnerability has a severity rating of Critical with a CVSS score of 10.0.Turan Security xavfsizlik byulleteni · statementDue to a serious vulnerability in the WordPress system and the REST API mechanism, an attacker can remotely break into the server without any additional information (such as login-password) (RCE).turansecurity · statementThe vulnerability exists in WordPress 6.9.x (up to 6.9.5) and 7.0.x (up to 7.0.2) versions.turansecurity · statement