NSA issues critical PHP security advisory

The National Security Agency (NSA) issued an advisory regarding two critical vulnerabilities in PHP. These vulnerabilities can provide direct access to a server's file system or database. The advisory applies to all organizations using PHP for their systems. The NSA recommends that organizations prepare for an update or take systems offline if an immediate update is not feasible. The NSA will provide additional guidance shortly.

For Indian-origin web developers and IT administrators, this advisory means immediate action is needed to patch systems or take them offline to prevent server compromise.

Source: @NSACyber