Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.