NSA warns of two critical decades-old PHP flaws found with AI by OpenAI/Calif and Wiz; patched in PHP 8.5.12
The NSA issued a warning on Wednesday about two critical vulnerabilities in PHP, present in all versions since PHP 5 (2004). The PHP Foundation has already released patches. The flaws let attackers reach the server file system or the database used by the web application. The NSA advises that any site that cannot be patched immediately sho…