Comment by nickysielicki

3 hours ago

Docker images from Wordpress, joomla, and drupal were all exploitable.

https://www.wiz.io/blog/php2shell-php-rce

Article's very vague about how the RCE actually works. They talk about the memory corruption bugs but not how exactly those become RCE.