Zend Framework XML EXternal Entity Injection
legalhackers.com