Unverified50% confidenceFactExact time
PHP2Shell is described as a vulnerability affecting the software behind about 70% of websites.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/22/2026
First Seen
Valid until: 1/20/2027
Sources
Related Entities
Related Claims
UnverifiedPHP has been disclosed to have two critical-severity security vulnerabilities.74% similarUnverifiedThe core risk of the php2shell vulnerability is that it extends from a flaw at the PHP level to shell command execution.73% similarUnverifiedPHP2Shell is a publicly disclosed exploit chain that can chain multiple flaws in PHP applications into a complete remote code execution (RCE) path.73% similarUnverifiedPHP deserialization vulnerabilities recur in WordPress plugins and Composer packages, rooted in developers' insufficient awareness of object injection risks.69% similarUnverifiedCommon causes of RCE in PHP include insecure deserialization, file inclusion vulnerabilities and misuse of dangerous functions.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1085702API
curl https://kongchang.com/api/v1/knowledge/claims/1085702MCP
get_claim(id=1085702)