PHP Code Execution Attack Puts WordPress Sites at Risk
Vulnerability
File Operation Induced Unserialization via the “phar://” Stream Wrapper
Systems Affected
- CMSs (WordPress and Typo 3 confirmed)
- Other PHP applications that uses the “phar://” Stream Wrapper
Overview
