Two critical vulnerabilities have been identified with PHP, a programming language which is widely used across the internet.