Php 7.3.19 zip extension is missing - aaPanel - Hosting control panel. One-click LAMP/LEMP.
Rce can be obtained by uploading malicious .phar file at image field on /vaccination-manager/pub/upload-vaccination-proof.php because of vulnerable version of monolog. | BugBountyHunter.com
PHAR better Tools
Fix #76929: zip-based phar does not respect phar.require_hash by cmb69 路 Pull Request #6517 路 php/php-src 路 GitHub