WordPress before 3.6.1: PHP Object Injection
(
2 comments
| 5 points
| on HN
)
Re:WordPress before 3.6.1: PHP Object Injection
by JiJadiJade on Thursday September 12, 2013 @03:18AM
(#6372557)
This is pretty a lengthy read and if I follow it correctly, then the actual problem has not been fixed? So Wordpress is still not able to differ between injected serialized data (which is dangerous as the PHP manual states as well) and that data it serialized on it's own, right?
[ Parent
| on HN ]
Re:WordPress before 3.6.1: PHP Object Injection
by darkotic on Thursday September 12, 2013 @11:15AM
(#6374552)
The article says it has been fixed in 3.6.1.
[ Parent
| on HN ]