Category Archives: Object injection vulnerabilities

Sven Morgenroth Talks About PHP Object Injection Vulnerabilities on Paul’s Security Weekly Podcast

Posted on by

Sven Morgenroth, a security researcher at Netsparker, was interviewed by Paul Asadoorian and Larry Pesce for Paul’s Security Weekly #584. Sven talked about PHP Object injection vulnerabilities and explained the dangers of PHP’s unserialize function. Sv… Continue reading Sven Morgenroth Talks About PHP Object Injection Vulnerabilities on Paul’s Security Weekly Podcast→

Sven Morgenroth, Netsparker – Paul’s Security Weekly #584

Posted on by

Sven will talk about PHP Object injection vulnerabilities and explain the dangers of PHP’s unserialize function. He will show the format of serialized PHP Objects, explain PHP’s magic methods and how to write an exploit for a PHP Object Inj… Continue reading Sven Morgenroth, Netsparker – Paul’s Security Weekly #584→