Unverified50% confidenceFactExact time
PHP deserialization vulnerabilities are one of the common entry points through which attackers obtain a server shell from vulnerabilities in PHP applications.
1
Sources
50%
Confidence
Long-term
Relevance
10/27/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedPHP2Shell is a publicly disclosed exploit chain that can chain multiple flaws in PHP applications into a complete remote code execution (RCE) path.78% similarUnverifiedCommon causes of RCE in PHP include insecure deserialization, file inclusion vulnerabilities and misuse of dangerous functions.78% similarUnverifiedThe PHP2 Shell vulnerability affects versions dating back at least to PHP 5.4, every PHP version released in the past 10 years is affected by at least one of these vulnerabilities, and the vulnerability has existed for 14 years.78% similarUnverifiedThe core risk of the php2shell vulnerability is that it extends from a flaw at the PHP level to shell command execution.77% similarUnverifiedPHP has been disclosed to have two critical-severity security vulnerabilities.77% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1104451API
curl https://kongchang.com/api/v1/knowledge/claims/1104451MCP
get_claim(id=1104451)