Feedly:Fortinet Blog | News and Threat Research - All Posts. Analysis of PHP's CVE-2016-6289 and CVE-2016-6297

from Fortinet Blog | News and Threat Research - All Posts

PHP is a programming language that was created in 1995 by Rasmus Lerdorf. And according to W3Techs, it’s dynamically generating content on more than 82% of all websites worldwide. That means hundreds of millions of web servers are vulnerable to the flaws we are describing below. Last month, FortiGuard discovered two security issues in PHP’s core (CVE-2016-6189) and in PHP’s zip (CVE-2016-6197). These issues affect both the current PHP version 5 and its upcoming version 7. These bugs are located in different part of the code,...