Question: has the PHP vulnerability been documented or had it remained as «  there is a vulnerability in PHP » with no details available on what sort of functions are vulnerable ?