5 years ago

Category: PHP

In Real World CTF 2019 Quals, Andrew Danau, a security researcher, found that when the %0a symbol was sent to the target server URL, the server returned an exception and it was very likely to be a vulnerability. On October 23, 2019, someone posted the details of the vulnerability and exp on Github.