Secunia Security Advisory – Avaya has acknowledged some vulnerabilities in PHP included in various Avaya products, which can be exploited by malicious users to cause a DoS (Denial of Service) or compromise a vulnerable system, and by malicious people to conduct cross-site scripting attacks and potentially compromise a vulnerable system.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49144/sa21564.txt
Source: https://packetstormsecurity.com/files/49144/Secunia-Security-Advisory-21564.html