Use of PHP unserialize function on untrusted input in content management system might allow code execution.
CVE-2012-0911
Use of PHP unserialize function on untrusted input in content management system allows code execution using a crafted cookie value.
CVE-2012-0911