Additionally, the malicious commit was made in the name of PHP creator, Rasmus Lerdorf. But, that is hardly surprising as with source code version control systems like Git, it is possible to sign ...

A critical vulnerability in the PHP programming language can be trivially exploited to execute malicious code on Windows devices ... through the escaping? POST /test.php?%ADd+allow_url_include ...