How Exposed Is Critical Infrastructure Software to PHP2Shell?