CVE-2005-1921

EUVD-2005-1923 · Published Jul 5, 2005

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.

Technologies

Drupal DrupalPhp Xml RpcTiki Tikiwiki Cms\/GroupwareDebian Debian LinuxGggeek Phpxmlrpc

Weaknesses

CWE-94

CVSS scores

v2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Stealth

T1190Exploit Public-Facing Application T1027.006HTML Smuggling T1027.009Embedded Payloads T1564.009Resource Forking

References

http://marc.info/?l=bugtraq&m=112008638320145&w=2
http://marc.info/?l=bugtraq&m=112015336720867&w=2
http://marc.info/?l=bugtraq&m=112605112027335&w=2
http://pear.php.net/package/XML_RPC/download/1.3.1
http://secunia.com/advisories/15810
http://secunia.com/advisories/15852

Potentially impacted assets

See if this affects your attack surface