One exploitation attempt was sourced to an IP address based in China, says security provider VulnCheck. The flaw affects PHP, a scripting language used by an estimated 70% of websites.