News for hackers. Stuff that matters.
Re:PHP-FPM remote code execution bug exploited in the wild by tomclancy on Sunday October 27, 2019 @12:45PM (#21370812)
>There must be a PATH_INFO variable assignment via statement fastcgi_param PATH_INFO $fastcgi_path_info;. At first, we thought it is always present in the fastcgi_params file, but it's not true.

This is also precondition, and fortunately it's not included in standard fastcgi_params files.

There are no comments on this comment yet.