EIP-2026-104756

This advisory describes a full path disclosure vulnerability in PHP <=5.3 due to improper handling of array inputs in the preg_match() function, which generates warnings containing the script's full path.