PHP is a server-side scripting language whose code, runtimes, and frameworks can expose web applications to vulnerabilities when poorly secured.
Search across headline titles and summaries.
Background for this topic.
PHP is an open-source programming language and runtime used mainly to execute server-side code for web applications, often generating HTML and interacting with databases, files, sessions, and external services. Its security relevance covers both the PHP runtime and the applications, extensions, and third-party packages that run within it.
PHP releases and bundled or separately installed extensions can contain vulnerabilities, so supported versions and dependencies should be tracked and patched through vulnerability management. More commonly, application flaws arise from unsafe input handling, such as SQL injection, cross-site scripting, file inclusion, or insecure deserialization; these are not automatically prevented by the language. Secure deployments use parameterized database queries, context-appropriate output encoding, strict upload and filesystem controls, protected session and CSRF handling, and least-privilege service accounts. Configuration and dependency changes should be tested, and logs can help identify exploitation of exposed PHP endpoints.
Weekly headline count for the current query.
Infamous botnets like Mirai are exploiting Web-exposed assets such as PHP servers, IoT devices, and cloud gateways to gain control over systems and build strength.
Cloud service providers are getting better at protecting data, pushing adversaries to develop new cloud ransomware scripts to target PHP applications, a new report says.
An RCE vulnerability that affects the Web scripting language on Windows systems is easy to exploit and can provide a broad attack surface.
Attackers can inject and execute arbitrary PHP code using a flaw in Backup Migration, which has been downloaded more than 90K times.