Damien Seguy has posted this new item on Nexen.net with some of the security issues that have been pointed out on several versions of PHP and lots of web applications that use it.

There are no real issues with the current versions of PHP (5.0.5 and 4.4.0) and MySQL (4.0.26, 4.1.14, and 5.0.13), but updating to the latest version is strongly recommended.

Some of the applications with security issues include:

• Complete PHP Counter Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks
• Cyphor Remote SQL Injection and Cross-Site Scripting Vulnerabilities
• phpMyAdmin Local file inclusion 2.6.4-pl1
• YaPig Homepage Form Field HTML Injection Vulnerability