alt Hacker NewsYeah, the specific setup is not vulnerable to PHP2SHELL. CLI server + 1 MiB cap + inert page + high memory limit removes all the possibilities from the two CVEs. It would just be collecting POCs for actually vulnerable setups.
Replies
tclancy • today at 12:34 AM
Should be the top comment IMO.
I'm just an interested bystander, but this seems like a (near?) default nginx config. Is that accurate?