Ars Technica security
PHP warns it plans to release 2 emergency patches imminently

Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
Summary from the publisher's feed.
Ars Technica security

Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
Summary from the publisher's feed.