Add PHP Object Injection vulnerability disclosed by Tom Van Goethem