A handful of holes appear in different versions of a common open-source scripting language, PHP, and could allow attackers to crash an Apache Web site or compromise a server.

The transactions needed to store information in the database require Structured Query Language (SQL) commands placed inside a PHP script.