php|architect has a new note about a few PHP vulnerabilities:

This summer I have been playing around with some php issue and got some php vulnerabilities.Bad array parsing in php_variables.c could lead to show arbitrary memory content such as pieces of php code and other data. This affects all GET, POST or COOKIES variables.

By appending to a GET/POST/COOKIE variable array a [ (open square bracket) like abc[a][, the length of the 'a' array element is set to the length of variable name strlen("abc").

See SecurityFocus.com for more details...