Black Hat 2018 – Expert demonstrated a new PHP code execution attack

Black Hat 2018 – Expert demonstrated a new PHP code execution attack The security researcher Sam Thomas from Secarma, has discovered a new attack technique that leverages critical deserialization vulnerabilities in PHP programming language. The flaws potentially expose web applications written in the popular language to cyber attacks, including websites running CMSs like WordPress and Typo3. The expert discovered that an attacker can use low-risk functions against Phar archives to trigger […] The post Black Hat 2018 – Expert demonstrated a new PHP code execution attack appeared first on Security Affairs. Read More At -> https://blog.cripperz.sg/2018/08/18/black-hat-2018-expert-demonstrated-a-new-php-code-execution-attack/