Remote Code Execution

http://devco.re/blog/2016/04/21/how-I-hacked-facebook-and-found-someones-backdoor-script-eng-ver/

http://blog.orange.tw/2017/07/how-i-chained-4-vulnerabilities-on.html

https://hackerone.com/reports/125980

http://blog.orange.tw/2013/11/yahoo-bug-bounty-part-2-loginyahoocom.html

https://www.evonide.com/how-we-broke-php-hacked-pornhub-and-earned-20000-dollar/

https://secgeek.net/bookfresh-vulnerability/

https://hackerone.com/reports/134738