Thursday, October 22, 2026
English Edition Subscribe Newsletter
Home › Other

Technology News

PHP Security Flaw: Indian websites on laptops under a PHP2Shell alert, with the India map in the background Other

PHP Security Flaw: Which Indian Websites Are Affected by PHP2Shell, What CERT-In Said and What Users Should Know

A critical security flaw in PHP, the software behind a large share of the world websites, has put Indian websites on alert along with the rest of the internet. The two flaws, known as PHP2Shell, can let an attacker run code on a website server without logging in, and PHP developers released emergency fixes on October 21. India cyber agency CERT-In has issued its own alert for the flaws, while governments in Europe took websites offline as a precaution.

PHP2Shell Vulnerability: Hackers can take over websites through the critical PHP flaw without a password Other

PHP2Shell Vulnerability: Critical PHP Flaw Allows Website Takeover Without a Password, Patch Released

Two critical flaws in PHP, the software that runs a large share of the world websites, can let an attacker take over a website server without any password. The flaws, grouped under the name PHP2Shell by security firm Wiz, were patched in an emergency release on October 21, and reports of exploitation attempts began the same day. Website owners who have not updated are being urged to patch immediately.