PHP Object Injection
Userinput reaches sensitive sink. For more information, press the help icon on the left side.
12: unserialize $data = unserialize($compressed); 
9: $compressed = base64_decode($cookieData); 
8: $cookieData = str_replace('#', '+', $cookieData); 
6: $cookieData = $_COOKIE['___389_shR7_ZeE'];