writeups.xyz / Exploiting Arbitrary Object Instantiations in PHP without Custom Classes

Submitter : c2a

Date: 14 July 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• Arbitrary Object Instantiation
• Bruteforce
• LDAP Injection

Programs :

• Undisclosed

Authors :

• Arseniy Sharoglazov (@_Mohemiv)

Link :
https://swarm.ptsecurity.com/exploiting-arbitrary-object-instantiations/