Researchers Used PHP Zero-Days to Hack PornHub

A team of researchers discovered a couple of serious vulnerabilities in PHP and managed to gain remote code execution access on one of the world’s most popular adult websites.

Dario Weißer, Ruslan Habalov and an expert who uses the online moniker “cutz” discovered in late May that they could hack PornHub by leveraging vulnerabilities in PHP.