PHP hit by another critical flaw – Computerworld
The bug was found in XML-RPC for PHP and PEAR XML_RPC as the result of a security audit by the Hardened-PHP Project. The group said it decided to carry out its own audit after other flaws were disclosed in the two libraries earlier this summer.