This can make it possible for unauthenticated attackers to inject a PHP item. the extra presence of the POP chain lets attackers to execute code remotely, and also to delete arbitrary information. In the event the query string contains sensitive facts which include session identifiers, then attackers can use this information and facts to start fur