OSCE3 Practice Questions - OffSec Certified Expert 3 (OSCE3) Exam

Access More Questions

During an OSWE (WEB-300) exam, you discover a PHP application using unserialize() on user-controlled input. Which attack class is most directly applicable?

SQL injection via prepared statement bypass PHP object injection leading to remote code execution XML External Entity (XXE) injection Server-Side Template Injection (SSTI)

Correct Answer:

PHP object injection leading to remote code execution

Access more questions from this quiz

Continue to OSCE3 Practice Questions - OffSec Certified Expert 3 (OSCE3) Exam for more practice questions and the full quiz experience.

Access More Questions