jmtd → log → geek → www → XML RPC exploits
What made the recent XML RPC exploits so serious? The fact that each PHP application implementing XML-RPC has taken a static copy of one library, which needed to be individually patched.
That's why code sharing is so important. Look at the list of vulnerable apps: Drupal; wordpress; Xoops; the PEAR copy; what looks like the original; Serendipity; phpMyFaq...
Comments