by andrewmackrodt 1 day ago

Assuming you need to exploit the full chain of bugs mentioned in https://www.wiz.io/blog/php2shell-php-rce, this does not seem to be exploitable as there is no session initialised, i.e. no PHPSESSID cookie; we also do not know if OP has opcache enabled.