Unverified50% confidenceFactExact time
PHP2Shell is a publicly disclosed exploit chain that can chain multiple flaws in PHP applications into a complete remote code execution (RCE) path.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/21/2026
First Seen
Valid until: 1/19/2027
Sources
Related Entities
Related Claims
UnverifiedThe way PHP2Shell was exposed continues the trend of using AI-assisted analysis of code and attack surfaces to accelerate vulnerability discovery.76% similarUnverifiedPHP has been disclosed to have two critical-severity security vulnerabilities.73% similarUnverifiedThe PHP core is written in C, and memory corruption vulnerabilities in common code paths affect all deployments using that branch.65% similarUnverifiedPHP deserialization vulnerabilities recur in WordPress plugins and Composer packages, rooted in developers' insufficient awareness of object injection risks.65% similarUnverifiedThe attack entry point was a malicious dataset that exploited two code execution paths: a remote code dataset loader and a configuration template injection.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1081085API
curl https://kongchang.com/api/v1/knowledge/claims/1081085MCP
get_claim(id=1081085)