PHP -7 could be vulnerable to remote exploits
http://blog.checkpoint.com/2016/08/2...mote-exploits/
Since we recently had a discussion about the use of PHP-7, I thought it might be wise to post this up so that anyone that has switched over to it to be aware and to watch for updates.
To be clear, Checkpoint has stated they know of no known vulnerabilities in php-7, but THEY had shown
Quote:
The Check Point Research Team demonstrates an exploit of PHP-7, using an unserialize vulnerability,
Looking at the change log, there has been updates as recent as August 18,2016 so us geeky tech types should keep an eye out for additional updates I suspect.
change log can be found here
http://php.net/ChangeLog-7.php
Rick
Universal4