It’s been two months since our disclosure of an Object Injection vulnerability affecting versions <2.3.3 of the Joomla! Hikashop extension. The vulnerability allowed an attacker to execute malicious code on a target website.
How Does Object Injection Work?
more here........http://blog.sucuri.net/2014/11/deep-dive-into-the-hikashop-vulnerability.html
How Does Object Injection Work?
more here........http://blog.sucuri.net/2014/11/deep-dive-into-the-hikashop-vulnerability.html