php2shell (CVE-2026-109618/619): 14 years of vulnerable PHP.
Qi Deng's repo (https://github.com/ikow/php2shell-poc) only verified whether you were vulnerable. I built the rest:
→ 3 chains with an interactive shell (uid=33)
→ reproducible Docker lab
→ detection rules
https://github.com/GoldraK/php2shell-poc
GitHubGitHub - ikow/php2shell-poc: CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & AnalysisCVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis - ikow/php2shell-poc
commit 4a11879