pentester.land· Feb 7, 2017· by Justin Kennedy (@jstnkndy)

Type Juggling and PHP Object Injection, and SQLi, Oh My!

Target Program: -

🎯 Vulnerability: SQL Injection (SQLi)

💡 Defense Fix: Use Parameterized Prepared Statements (ORM) for all database queries and disable verbose error messages.

#Type juggling#PHP object injection#Insecure deserialization#SQL injection