Comment

Comment by andrewmackrodt

Assuming you need to exploit the full chain of bugs mentioned in https://www.wiz.io/blog/php2shell-php-rce, this does not seem to be exploitable as there is no session initialised, i.e. no PHPSESSID cookie; we also do not know if OP has opcache enabled.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton