PHP server vulnerabilities are exposing millions of servers to risks with no official fix available.