Perfex CRM: Unauthenticated RCE via PHP's S: deserialization format (nullcathedral.com)

1 points by nullcathedral 6mo ago ↗ HN

1 comment

[ 3.3 ms ] story [ 14.6 ms ] thread

This was one of my most frustrating disclosures, feedback on the process is very welcome :)