Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.