Two PHP vulnerabilities allow unauthenticated attackers to remotely execute arbitrary code on exposed web servers