phpxmlrpc vulnerable to argument injection via local file access in Client:send
via manipulation of $protocol
argument.
もっと詳しく