The Personal Information Protection Commission (PIPC) has urged public institutions and private companies handling personal data to strengthen security measures to prevent data breaches exploiting PHP vulnerabilities.
On October 22, the PIPC called for swift implementation of security updates related to PHP vulnerabilities and database access controls for organizations operating web services.
PHP2Shell is a vulnerability that allows attackers to execute arbitrary malicious commands on web servers without requiring separate login or authentication procedures. The Ministry of Science and ICT and the Korea Internet & Security Agency (KISA) have provided guidance on how to respond to this vulnerability.
PHP is widely used software for developing and operating web services. If exploited, the vulnerability could lead not only to server breaches but also to the leakage of user personal information stored in connected databases.
In particular, if PHP-based database management tools like phpMyAdmin are exposed to the internet or if excessive database access permissions are granted, attackers could exploit these weaknesses to access large amounts of personal data.
The PIPC emphasized the need to first check the version of PHP used in systems and apply the latest security patches. It also recommended deleting unused web services, restricting direct internet access to database management tools like phpMyAdmin, and updating related software to the latest versions. Additionally, it advised cleaning up unnecessary configuration files and minimizing personal data access permissions for web service accounts.
Organizations should monitor for abnormal access patterns, such as mass queries or exports from personal data databases, and strengthen detection and blocking of suspicious activities as well as access log management. PHP software used in outsourced development and operations, as well as by subcontractors and hosting environments, should also be subject to inspection.
Yang Cheong-sam, head of the PIPC Secretariat, stated, “This vulnerability poses a risk of large-scale damage, as it could lead to the leakage of numerous users' personal information stored in connected databases, not just the breach of the website itself. We must be particularly vigilant to prevent the leakage of citizens' personal information by strengthening management systems, including security updates and monitoring for suspicious access.”
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.