Unverified50% confidenceFactExact time
If PHP-FPM's pool configuration item security.limit_extensions is set improperly, it may allow execution of non-PHP files, thereby worsening the impact of vulnerabilities.
1
Sources
50%
Confidence
Long-term
Relevance
10/22/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAF_UNIX 套接字操作在默认的容器配置下通常是允许的，不需要特权能力，非特权容器内的普通进程即具备触发该漏洞的前提条件64% similarUnverifiedIf PHP-FPM's listening socket is misconfigured (for example, listening on 0.0.0.0 with no access control), attackers may communicate directly with FPM and bypass the web server's security rules.62% similarUnverifiedThe core risk of the php2shell vulnerability is that it extends from a flaw at the PHP level to shell command execution.61% similarUnverifiedCommon causes of RCE in PHP include insecure deserialization, file inclusion vulnerabilities and misuse of dangerous functions.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1084789API
curl https://kongchang.com/api/v1/knowledge/claims/1084789MCP
get_claim(id=1084789)