Unverified50% confidenceFactExact time
The core risk of the php2shell vulnerability is that it extends from a flaw at the PHP level to shell command execution.
1
Sources
50%
Confidence
Long-term
Relevance
10/21/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedPHP has been disclosed to have two critical-severity security vulnerabilities.78% similarUnverifiedPHP2Shell is a publicly disclosed exploit chain that can chain multiple flaws in PHP applications into a complete remote code execution (RCE) path.76% similarUnverifiedPHP deserialization vulnerabilities recur in WordPress plugins and Composer packages, rooted in developers' insufficient awareness of object injection risks.67% similarUnverifiedCloudflare deployed protective rules against a vulnerability known as "php2shell".67% similarUnverifiedThe PHP core is written in C, and memory corruption vulnerabilities in common code paths affect all deployments using that branch.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1081953API
curl https://kongchang.com/api/v1/knowledge/claims/1081953MCP
get_claim(id=1081953)