{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:11:23Z","timestamp":1750306283774,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2016,4,4]],"date-time":"2016-04-04T00:00:00Z","timestamp":1459728000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2016,4,4]]},"DOI":"10.1145\/2851613.2851865","type":"proceedings-article","created":{"date-parts":[[2016,6,2]],"date-time":"2016-06-02T19:23:42Z","timestamp":1464895422000},"page":"801-807","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["Object injection vulnerability discovery based on latent semantic indexing"],"prefix":"10.1145","author":[{"given":"Hossain","family":"Shahriar","sequence":"first","affiliation":[{"name":"Kennesaw State University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hisham","family":"Haddad","sequence":"additional","affiliation":[{"name":"Kennesaw State University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2016,4,4]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"E. Romano PHP Object Injection Vulnerability https:\/\/www.owasp.org\/index.php\/PHP_Object_Injection"},{"key":"e_1_3_2_1_2_1","volume-title":"www.owasp.org\/index.php\/Top_10_2013-Top 10","author":"Web Application Security The Open","year":"2013","unstructured":"The Open Web Application Security Project (OWASP) Top 10, www.owasp.org\/index.php\/Top_10_2013-Top 10, 2013."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2643134"},{"key":"e_1_3_2_1_4_1","unstructured":"PHP unserialize method Accessed from http:\/\/php.net\/manual\/en\/function.unserialize.php"},{"key":"e_1_3_2_1_5_1","unstructured":"PHP serialize method Accessed from http:\/\/php.net\/manual\/en\/function.serialize.php"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660363"},{"key":"e_1_3_2_1_7_1","volume-title":"BlackHat USA","author":"S.","year":"2010","unstructured":"Esser, S. Utilizing Code Reuse Or Return Oriented Programming in PHP Applications. In BlackHat USA (2010)."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2737090"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.5555\/1394399"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1007\/11427995_68"},{"key":"e_1_3_2_1_11_1","first-page":"87","volume-title":"MD","author":"Zukas A.","year":"2003","unstructured":"A. Zukas and R. Price, \"Document Categorization Using Latent Semantic Indexing,\" Proceedings of Symposium on Document Image Understanding Technology, Greenbelt, MD, April 2003, pp. 87--91."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.entcs.2009.07.009"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.5555\/776816.776832"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5555\/77013"},{"key":"e_1_3_2_1_15_1","article-title":"Smashing the Stack for Fun and Profit","volume":"49","author":"One A.","year":"1996","unstructured":"A. One, \"Smashing the Stack for Fun and Profit,\" Phrack Magazine, Vol. 49, Article 14, 1996, Accessed from http:\/\/insecure.org\/stf\/smashstack.html","journal-title":"Phrack Magazine"},{"key":"e_1_3_2_1_16_1","unstructured":"NetBSD Non-executable stack and heap Accessed from http:\/\/www.netbsd.org\/docs\/kernel\/non-exec.html"},{"key":"e_1_3_2_1_17_1","volume-title":"Advanced return-to-lib(c) exploits","author":"Ihsahn A.","year":"2001","unstructured":"A. Ihsahn, Advanced return-to-lib(c) exploits, 2001, Accessed from http:\/\/phrack.org\/issues\/58\/4.html"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/TEFSE.2009.5069582"},{"key":"e_1_3_2_1_19_1","unstructured":"PHP Magic Method Accessed from http:\/\/php.net\/manual\/en\/language.oop5.magic.php"},{"key":"e_1_3_2_1_20_1","unstructured":"JSON Format Accessed from http:\/\/json.org\/"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2187671.2187673"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SSIRI-C.2010.28"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/133160.133205"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.5555\/876889.880369"},{"key":"e_1_3_2_1_25_1","unstructured":"Open Source Vulnerability Database (OSVDB) http:\/\/osvdb.org"},{"key":"e_1_3_2_1_26_1","unstructured":"Contao CMS Object Injection Vulnerability http:\/\/osvdb.org\/show\/osvdb\/102856"},{"key":"e_1_3_2_1_27_1","unstructured":"SilverStripe Object Injection Vulnerability http:\/\/osvdb.org\/show\/osvdb\/85714"},{"key":"e_1_3_2_1_28_1","unstructured":"CMS Made Simple Object Injection Vulnerability http:\/\/osvdb.org\/show\/osvdb\/115504"}],"event":{"name":"SAC 2016: Symposium on Applied Computing","sponsor":["SIGAPP ACM Special Interest Group on Applied Computing"],"location":"Pisa Italy","acronym":"SAC 2016"},"container-title":["Proceedings of the 31st Annual ACM Symposium on Applied Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2851613.2851865","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2851613.2851865","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:38:57Z","timestamp":1750221537000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2851613.2851865"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,4,4]]},"references-count":28,"alternative-id":["10.1145\/2851613.2851865","10.1145\/2851613"],"URL":"https:\/\/doi.org\/10.1145\/2851613.2851865","relation":{},"subject":[],"published":{"date-parts":[[2016,4,4]]},"assertion":[{"value":"2016-04-04","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}