Perfex CRM: Unauthenticated RCE via PHP's S: deserialization format

by nullcathedral | View on Hacker News