4 ms·

https://github.com/Bo0oM/PHP_imap_open_exploit/blob/master/exploit.php https://github.com/Bo0oM/PHP_imap_open_exploit/blob/master/e... This seems to be the exp

https://github.com/Bo0oM/PHP_imap_open_exploit/blob/master/exploit.php https://github.com/Bo0oM/PHP_imap_open_exploit/blob/master/e... This seems to be the exploit they used?

busterarm 8y ago
Sanitize your inputs...
- segmondy 8y ago
  It wasn't just inputs, it's not enough, weak types. Using == instead of === they could brute force guess a session, it took multiple exploits to escalate till they got shell access.