PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn’t
Disabling PHP Session Upload Progress does not fully mitigate PHP2Shell; fixes for two critical flaws are scheduled for October 21.
More info