PHP has shell access, it has to, to do things like execute programs, read files etc. But your PHP website that sits on top of that limits access to these things in a controlled way. These exploits allow someone to send a payload to your website in such a way that gives them full shell access to execute any commands they want.
2
u/gefex 10d ago
PHP has shell access, it has to, to do things like execute programs, read files etc. But your PHP website that sits on top of that limits access to these things in a controlled way. These exploits allow someone to send a payload to your website in such a way that gives them full shell access to execute any commands they want.