Two critical PHP bugs reportedly let attackers run code without logging in · Digg