To preparando um resumão agora desse artigo mt bom aqui pra vocês:

https://slcyber.io/assetnote-security-research-center/a-novel-technique-for-sql-injection-in-pdos-prepared-statements/

Fiquei sabendo de sua existência pelo post do Shubs no linkedin:
https://www.linkedin.com/posts/shubhamshah_a-novel-technique-for-sql-injection-in-pdo-activity-7352898366252478464-ajo5

Searchlight Cyber

Novel SQL Injection Technique in PDO Prepared Statements

Searchlight Cyber's Security Research team details a Novel Technique for SQL Injection in PDO's Prepared Statements.