PHP high-risk vulnerability exposed: 360 free open-source Tulongfeng security check service, proactively investigate vulnerability risks

PHP, a widely used server-side programming language globally, has been exposed to two high-risk security vulnerabilities, collectively called "PHP2Shell." Under specific conditions, attackers can exploit the vulnerabilities to achieve remote code execution without authentication, potentially leading to website tampering, sensitive information leakage, or even server compromise. 360 completed vulnerability reproduction and attack path verification at the earliest opportunity and provided remediation recommendations. Meanwhile, 360 announced that its Tulongfeng security inspection service will be offered free of charge to enterprise users to help enterprises identify related risks.