vulnerability reporting.

Map Apache, MySQL or PHP clues to CVE applicability using product identity, supplier package and patch evidence, runtime and configuration. Keep a candidate version match separate from demonstrated exploitation and verified remediation.