{"id":3021,"date":"2026-10-23T00:55:12","date_gmt":"2026-10-22T15:55:12","guid":{"rendered":"https:\/\/onepress.co.kr\/?post_type=briefing&p=3021"},"modified":"2026-10-23T00:57:01","modified_gmt":"2026-10-22T15:57:01","slug":"2026-10-23-php2shell-vi","status":"publish","type":"briefing","link":"https:\/\/onepress.co.kr\/index.php\/briefing\/2026-10-23-php2shell-vi\/","title":{"rendered":"PHP s\u1eeda l\u1ed7i kh\u1ea9n c\u1ea5p: ch\u1ec9 c\u1eadp nh\u1eadt WordPress c\u00f3 th\u1ec3 ch\u01b0a \u0111\u1ee7"},"content":{"rendered":"

2026-10-23 00:55:12 KST<\/strong><\/p>\n

Ng\u00e0y 21\/10, d\u1ef1 \u00e1n PHP ph\u00e1t h\u00e0nh b\u1ea3n s\u1eeda kh\u1ea9n c\u1ea5p cho hai l\u1ed7 h\u1ed5ng c\u00f3 th\u1ec3 cho ph\u00e9p ch\u1ea1y m\u00e3 m\u00e0 kh\u00f4ng c\u1ea7n \u0111\u0103ng nh\u1eadp.<\/p>\n

M\u1ee9c ph\u01a1i nhi\u1ec5m t\u00f9y c\u1ea5u h\u00ecnh v\u00e0 \u0111\u01b0\u1eddng th\u1ef1c thi; \u0111i\u1ec1u n\u00e0y kh\u00f4ng c\u00f3 ngh\u0129a m\u1ecdi trang d\u00f9ng PHP \u0111\u1ec1u \u0111\u00e3 b\u1ecb x\u00e2m nh\u1eadp.<\/p>\n

L\u1ed7i n\u1eb1m \u1edf n\u1ec1n t\u1ea3ng b\u00ean d\u01b0\u1edbi \u1ee9ng d\u1ee5ng<\/h2>\n

WordPress v\u00e0 c\u00e1c d\u1ecbch v\u1ee5 t\u01b0\u01a1ng t\u1ef1 ch\u1ea1y tr\u00ean m\u00f4i tr\u01b0\u1eddng PHP. PHP2Shell li\u00ean quan \u0111\u1ebfn qu\u1ea3n l\u00fd b\u1ed9 nh\u1edb v\u00e0 x\u1eed l\u00fd l\u1ed7i c\u1ee7a n\u1ec1n t\u1ea3ng n\u00e0y. Khi x\u1eed l\u00fd y\u00eau c\u1ea7u g\u1eb7p l\u1ed7i, PHP c\u00f3 th\u1ec3 d\u00f9ng sai d\u1eef li\u1ec7u ch\u01b0a ho\u00e0n ch\u1ec9nh ho\u1eb7c v\u00f9ng nh\u1edb \u0111\u00e3 gi\u1ea3i ph\u00f3ng. V\u00ec v\u1eady, c\u1eadp nh\u1eadt giao di\u1ec7n, ti\u1ec7n \u00edch hay WordPress kh\u00f4ng \u0111\u1ed3ng ngh\u0129a PHP c\u0169ng \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt.<\/p>\n

Nh\u1eefng phi\u00ean b\u1ea3n n\u00e0o \u0111\u00e3 \u0111\u01b0\u1ee3c s\u1eeda?<\/h2>\n

B\u1ea3n s\u1eeda \u0111\u1ea7u ti\u00ean c\u1ee7a c\u00e1c nh\u00e1nh c\u00f2n h\u1ed7 tr\u1ee3 l\u00e0 8.2.35, 8.3.36, 8.4.27 v\u00e0 8.5.12. Hai m\u00e3 nh\u1eadn di\u1ec7n l\u00e0 CVE-2026-109618 v\u00e0 CVE-2026-109619. Nh\u00e0 ph\u00e2n ph\u1ed1i c\u00f3 th\u1ec3 \u0111\u01b0a b\u1ea3n v\u00e1 v\u00e0o g\u00f3i v\u1eabn mang s\u1ed1 phi\u00ean b\u1ea3n c\u0169. H\u00e3y h\u1ecfi nh\u00e0 cung c\u1ea5p hosting v\u1ec1 th\u00f4ng b\u00e1o s\u1eeda c\u1ea3 hai l\u1ed7i v\u00e0 PHP th\u1ef1c s\u1ef1 x\u1eed l\u00fd y\u00eau c\u1ea7u web.<\/p>\n

\"PHP
Minh h\u1ecda gi\u1ea3i th\u00edch do AI t\u1ea1o, kh\u00f4ng ph\u1ea3i \u1ea3nh th\u1eadt hi\u1ec7n tr\u01b0\u1eddng, kho, t\u00e1c ph\u1ea9m tr\u01b0ng b\u00e0y hay quan s\u00e1t; ki\u1ebfn tr\u00fac, m\u1ef1c n\u01b0\u1edbc v\u00e0 qu\u1ef9 \u0111\u1ea1o kh\u00f4ng \u0111\u01b0\u1ee3c t\u00e1i hi\u1ec7n \u0111\u00fang t\u1ef7 l\u1ec7.<\/figcaption><\/figure>\n

T\u01b0\u1eddng l\u1eeda ch\u1ec9 l\u00e0 m\u1ed9t l\u1edbp b\u1ed5 sung<\/h2>\n

Cloudflare cho bi\u1ebft \u0111\u00e3 quan s\u00e1t c\u00e1c l\u1ea7n th\u1eed t\u1ea5n c\u00f4ng trong l\u01b0u l\u01b0\u1ee3ng kh\u00e1ch h\u00e0ng v\u00e0 tri\u1ec3n khai bi\u1ec7n ph\u00e1p gi\u1ea3m thi\u1ec3u. L\u01b0u l\u01b0\u1ee3ng t\u1ea5n c\u00f4ng kh\u00f4ng ch\u1ee9ng minh m\u1ecdi l\u1ea7n th\u1eed \u0111\u1ec1u th\u00e0nh c\u00f4ng. C\u00f4ng ty c\u0169ng tham gia ph\u1ed1i h\u1ee3p c\u00f4ng b\u1ed1 n\u00ean kh\u00f4ng ho\u00e0n to\u00e0n t\u00e1ch r\u1eddi nghi\u00ean c\u1ee9u. Quan s\u00e1t ri\u00eang l\u00e0 ngu\u1ed3n ki\u1ec3m ch\u1ee9ng b\u1ed5 sung, c\u00f2n t\u01b0\u1eddng l\u1eeda kh\u00f4ng thay th\u1ebf b\u1ea3n v\u00e1 PHP.<\/p>\n

Qu\u1ea3n tr\u1ecb vi\u00ean n\u00ean ki\u1ec3m tra g\u00ec ti\u1ebfp theo?<\/h2>\n

C\u1ea7n ki\u1ec3m tra t\u01b0\u01a1ng th\u00edch, sao l\u01b0u, c\u00e0i g\u00f3i \u0111\u00e3 s\u1eeda v\u00e0 kh\u1edfi \u0111\u1ed9ng l\u1ea1i m\u00e1y ch\u1ee7 web, PHP-FPM c\u00f9ng c\u00e1c ti\u1ebfn tr\u00ecnh ch\u1ea1y l\u00e2u c\u00f3 li\u00ean quan. PHP tr\u00ean d\u00f2ng l\u1ec7nh c\u00f3 th\u1ec3 kh\u00e1c PHP c\u1ee7a website. Ng\u01b0\u1eddi truy c\u1eadp th\u00f4ng th\u01b0\u1eddng kh\u00f4ng th\u1ec3 x\u00e1c \u0111\u1ecbnh t\u00ecnh tr\u1ea1ng v\u00e1 l\u1ed7i ch\u1ec9 b\u1eb1ng c\u00e1ch m\u1edf trang. N\u00ean theo d\u00f5i khuy\u1ebfn c\u00e1o ch\u00ednh th\u1ee9c c\u1ee7a PHP v\u00e0 l\u1ecbch s\u1eed g\u00f3i c\u1ee7a hosting; b\u00e0i vi\u1ebft kh\u00f4ng k\u1ebft lu\u1eadn website c\u1ee5 th\u1ec3 n\u00e0o \u0111\u00e3 b\u1ecb x\u00e2m nh\u1eadp.<\/p>\n

Ngu\u1ed3n g\u1ed1c v\u00e0 ki\u1ec3m ch\u1ee9ng \u0111\u1ed9c l\u1eadp<\/h2>\n

Ngu\u1ed3n g\u1ed1c: PHP Foundation n\u00eau b\u1ea3n s\u1eeda, \u0111i\u1ec1u ki\u1ec7n \u1ea3nh h\u01b0\u1edfng, hai m\u00e3 CVE v\u00e0 qu\u00e1 tr\u00ecnh c\u00f4ng b\u1ed1: PHP Foundation \u00b7 2026-10-21<\/a><\/p>\n

Ki\u1ec3m ch\u1ee9ng b\u1ed5 sung: quan s\u00e1t l\u01b0u l\u01b0\u1ee3ng kh\u00e1ch h\u00e0ng v\u00e0 gi\u1ea3m thi\u1ec3u; c\u00f3 tham gia c\u00f4ng b\u1ed1, kh\u00f4ng ho\u00e0n to\u00e0n t\u00e1ch r\u1eddi nghi\u00ean c\u1ee9u: Cloudflare \u00b7 2026-10-21<\/a><\/p>\n

Khuy\u1ebfn c\u00e1o nh\u00f3m nghi\u00ean c\u1ee9u: b\u1ea3n s\u1eeda v\u00e0 c\u1eadp nh\u1eadt\/kh\u1edfi \u0111\u1ed9ng l\u1ea1i m\u00f4i tr\u01b0\u1eddng; kh\u00f4ng \u0111\u0103ng l\u1ea1i c\u00e1ch t\u1ea5n c\u00f4ng: PHP2Shell \u00b7 research advisory<\/a><\/p>\n

\u0110\u1ecdc b\u1eb1ng ng\u00f4n ng\u1eef kh\u00e1c<\/h2>\n

\ud55c\uad6d\uc5b4<\/a> \u00b7 English<\/a> \u00b7 Espa\u00f1ol<\/a> \u00b7 \u65e5\u672c\u8a9e<\/a> \u00b7 Ti\u1ebfng Vi\u1ec7t<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

PHP2Shell n\u1eb1m trong ch\u00ednh PHP. C\u1ea7n ki\u1ec3m tra m\u00f4i tr\u01b0\u1eddng th\u1ef1c s\u1ef1 ch\u1ea1y trang web v\u00e0 b\u1ea3n v\u00e1 c\u1ee7a nh\u00e0 ph\u00e2n ph\u1ed1i.<\/p>\n","protected":false},"featured_media":0,"template":"","meta":[],"class_list":["post-3021","briefing","type-briefing","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/briefing\/3021","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/briefing"}],"about":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/types\/briefing"}],"wp:attachment":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/media?parent=3021"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}