Securing php-fpm with nginx

[LuDo8]

Fortunately, the vulnerable servers are easy do identify and fix. Example: http://example.com/path/to/file.png ? a static object served by the vulnerable server. A crafted request to http://example.com/path/to/file.png/index.php for example should return 404. If it returns 500, then thing?s are bad. Worse though if it?s a 2xx or 3xx aka file.png = valid PHP.

So I go to my http://mywebsite.com/images/picture.png/index.php, and it gives me a bunch of codes, I'm guessing Nginx is vulnerable.

Whats the fix? The article wasn't exactly clear and simple.