|
Description
|
|
PHP object injection is an application level vulnerability that could allow an attacker to perform different kinds of malicious attacks, such as code injection, SQL injection, path traversal or denial of service, depending of the context. The vulnerability occurs when user-supplied input is not properly sanitized before being passed to the unserialize() PHP function.
|
