Home / exploits Invision Power Board 3.3.4 Unserialize REGEX Bypass
Posted on 08 November 2012
<?php /* So this is the patch that sanitizes, static public function safeUnserialize( $serialized ) { // unserialize will return false for object declared with small cap o // as well as if there is any ws between O and : if ( is_string( $serialized ) && strpos( $serialized, "