Internet Bug Bounty · Report #28445
SPL ArrayObject/SPLObjectStorage Unserialization Type Confusion Vulnerabilities
Validstatus
1upvotes
4 Jul 2014disclosed
How it was found
This vulnerability was reported directly to the PHP development team.
A detailed summary is available here: https://www.sektioneins.de/en/blog/14-08-27-unserialize-typeconfusion.html