CVE-2013-1465
Use of PHP unserialize function on untrusted input allows attacker to modify application configuration.
CVE-2012-3527
Use of PHP unserialize function on untrusted input in content management system might allow code execution.