Two critical PHP flaws allow attacks without a login. Emergency patches are available as Amazon reports exploitation before ...