A newly disclosed pair of flaws in PHP’s database driver layer shows that even mature code can hide dangerous surprises. The bugs live inside PHP Data Objects (PDO), the abstraction layer web applications use to talk to databases like Firebird and PostgreSQL. Low level quirks in these drivers let attackers slip malicious input past safe […]
The post Critical PHP PDO Driver Bugs Expose Firebird SQL Injection and PostgreSQL DoS Risks appeared first on Cyber Security News.