Multiple PHP Vulnerabilities Enables SQLi and DoS Attacks – Update Now

Security researchers have disclosed two significant vulnerabilities in PHP, the popular server-side scripting language, that could allow attackers to launch SQL injection (SQLi) and Denial of Service (DoS) attacks.

According to the report, Administrators and developers are urged to update their PHP installations immediately to mitigate these risks.

Overview of the Vulnerabilities

1. SQL Injection and Crash via pgsql Extension (CVE-2025-1735)

A moderate-severity flaw has been identified in PHP’s pgsql extension, which is used to interface with PostgreSQL databases.

The vulnerability arises because the extension ...