PHP versions 5.3 and below suffer from a preg_match() related full path disclosure vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/81698/major_rls57.txt
Source: https://packetstormsecurity.com/files/81698/PHP-5.3-preg_match-Path-Disclosure.html