CVE-2005-2498 in PHPXMLRPCinfo

Summary

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

08/08/2005

Disclosure

08/15/2005

Entries

1: VDB-25995

CPE

ready

CVSS

5.3

EPSS

0.04688

Activities

Very Low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!