Don't use this as a reason to diss PHP. Almost any target, no matter what language, is vulnerable.

"PHP" bulletin boards are the largest there is, VB is the most well known forum software there is... It has nothing to do with PHP, you can exploit any language.