Researchers at Positive Technologies have disclosed two high-severity vulnerabilities in PHP’s PDO extension layer one causing a NULL pointer dereference that crashes PHP worker processes, and another enabling SQL injection through a subtle mishandling of NUL bytes in the Firebird driver. The findings emerged from a broad audit of PHP’s database abstraction infrastructure and expose […]
The post PDO PostgreSQL Bug Triggers NULL Pointer Dereference and Crashes PHP Worker Processes appeared first on Cyber Security News.