The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.

The vulnerability of the exception::getTraceAsString function in the PHP interpreter is related to errors in data type mixing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

php: exception:: getTraceAsString type confusion issue after unserialize

A flaw was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to crash or, possibly, execute arbitrary code...