A decade-old PHP vulnerability affecting software behind about 75% of identifiable websites has triggered emergency fixes and service shutdowns across Europe.