Attacks started on June 8, less than 48 hours after the release of security updates by PHP's maintainers, and relied on publicly available exploit code ... a base64-encoded string that decodes ...

Exploit code that takes advantage of serious vulnerabilities in the open source server-side scripting language PHP has been published on public mailing lists. The exploit shows how one can steal ...