Vulnerable PHP demo
End-of-life PHP, version disclosed, no WAF in front.
Go