CVE-2005-1921 : 상세 정보

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.

관련 약점

메트릭

EPSS

EPSS 점수

EPSS 백분위수

익스플로잇 정보

Exploit Database EDB-ID : 43829

게시일 : 2015-07-01 22h00 +00:00
저자 : GulfTech Security
EDB 검증됨 : No

Exploit Database EDB-ID : 16882

게시일 : 2010-07-24 22h00 +00:00
저자 : Metasploit
EDB 검증됨 : Yes

Exploit Database EDB-ID : 1078

게시일 : 2005-06-30 22h00 +00:00
저자 : ilo--
EDB 검증됨 : Yes

Exploit Database EDB-ID : 1083

게시일 : 2005-07-03 22h00 +00:00
저자 : dukenn
EDB 검증됨 : Yes

Exploit Database EDB-ID : 1084

게시일 : 2005-07-03 22h00 +00:00
저자 : Mike Rifone
EDB 검증됨 : Yes

언급된 제품

구성 0

Php>>Xml_rpc >> Version 까지 (포함) 1.3.0

구성 0

Gggeek>>Phpxmlrpc >> Version 까지 (포함) 1.1

구성 0

Drupal>>Drupal >> Version 까지 (미포함) 4.5.4

Drupal>>Drupal >> Version 부터 (포함) 4.6.0 까지 (미포함) 4.6.2

구성 0

Tiki>>Tikiwiki_cms\/groupware >> Version 까지 (미포함) 1.8.5

구성 0

Debian>>Debian_linux >> Version 3.1

참고 자료