Recently disclosed flaws in PHP could enable remote code execution, malware distribution and the injection of malicious scripts into websites. According to Cloudflare CEO Matthew Prince, the network recorded millions of exploitation attempts within 24 hours of their publication, as well as thousands of attempts before they were disclosed. PHP powers about 69% of websites with a known server-side programming language, while roughly one in five websites worldwide routes traffic through Cloudflare. The FBI warned that the vulnerabilities could compromise sensitive data and networks. Immunefi, the world’s largest bug bounty platform, says it has paid $140 million across 650 protocols.
Source: Read the original article


