http://www.cvedetails.com/vulnerabil...8/PHP-PHP.html
Sql injection, crsf, xss, session hijacking, remote file inclusion.