Gentoo Linux Security Advisory GLSA 200507-15 – James Bercegay has discovered that the XML-RPC implementation in PHP fails to sanitize input passed in an XML document, which is used in an eval() statement. Versions less than 4.4.0 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38732/glsa-200507-15.txt
Source: https://packetstormsecurity.com/files/38732/Gentoo-Linux-Security-Advisory-200507-15.html