This release fixes a security issue found in CDetailView in the 1.1.14 release. The issue allows an attacker to
potentially execute arbitrary PHP script on the server. So we urge all 1.1.14 users to upgrade Yii to this latest release. Note that the issue only affects 1.1.14. All previous releases are not affected.
Upgrading to this release is very safe and will not break your existing code.
We have reserved a CVE number (CVE-2014-4672) for this issue that you can use to refer to it.
http://www.yiiframework.com/news/78/yii-1-1-15-is-released-security-fix/