The Namibia Cybersecurity Incident Response Team (Nam-CSIRT) has warned companies and businesses using the PHP programming language to run their websites about newly discovered vulnerabilities in the system.
PHP is one of the most common programming languages used globally to run websites. The team that runs PHP announced on Wednesday that a team of researchers had discovered new vulnerabilities.
“These vulnerabilities could allow unauthenticated attackers to remotely execute malicious code on affected web servers without requiring valid login credentials,” Nam-CSIRT says in a notice issued on Thursday.
As PHP is used for about 70% of websites globally, Nam-CSIRT recommends reviewing all websites, web servers, applications and third-party products using PHP.
“Organisations using PHP 8.1 or older should prioritise upgrading to supported versions or obtaining verified security fixes from their operating system,” Nam-CSIRT says.
If it cannot yet be updated, the response team suggests restricting public access to the system.
Globally, the PHP alert disrupted websites ranging from government websites to Wikipedia.
The company began rolling out patches to its system, which Nam-CSIRT recommends Namibians update their systems with.
