DoS, base_dir protection bypass, crossite scripting.
vulners.com/securityvulns/securityvulns:doc:25044
vulners.com/securityvulns/securityvulns:doc:25117
vulners.com/securityvulns/securityvulns:doc:25176