Vulnerabilities in PHP Factory software