Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine (part 2)
www.ambionics.io
In this blog post, we will explore a new way of exploiting the vulnerability on PHP, using direct calls to iconv(), and illustrate the vulnerability by targeting Roundcube, a popular PHP webmail.