Cloudanix VulnDB

CVE-2005-1921

None

CVSS

—

EPSS

79.1%

Published

Jul 5, 2005

CISA due date

—

The record

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.

Affected packages

Ecosystem Package Introduced Fixed
Debian:3.0 php4 0 4:4.1.2-7.woody5
Debian:3.0 phpgroupware 0 No fix
Debian:3.1 drupal 0 4.5.3-3
Debian:3.1 egroupware 0 1.0.0.007-2.dfsg-2sarge1
Debian:3.1 php4 0 4:4.3.10-16
Debian:3.1 phpgroupware 0 0.9.16.005-3.sarge0
Debian:4.0 php4 0 4:4.3.10-16etch1
Red Hat:enterprise_linux:3::as php 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::as php-debuginfo 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::as php-devel 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::as php-imap 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::as php-ldap 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::as php-mysql 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::as php-odbc 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::as php-pgsql 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::desktop php 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::desktop php-debuginfo 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::desktop php-devel 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::desktop php-imap 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::desktop php-ldap 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::desktop php-mysql 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::desktop php-odbc 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::desktop php-pgsql 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::es php 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::es php-debuginfo 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::es php-devel 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::es php-imap 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::es php-ldap 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::es php-mysql 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::es php-odbc 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::es php-pgsql 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::ws php 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::ws php-debuginfo 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::ws php-devel 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::ws php-imap 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::ws php-ldap 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::ws php-mysql 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::ws php-odbc 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:3::ws php-pgsql 0 0:4.3.2-24.ent
Red Hat:enterprise_linux:4::as php 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-debuginfo 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-devel 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-domxml 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-gd 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-imap 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-ldap 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-mbstring 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-mysql 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-ncurses 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-odbc 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-pear 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-pgsql 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-snmp 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::as php-xmlrpc 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-debuginfo 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-devel 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-domxml 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-gd 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-imap 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-ldap 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-mbstring 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-mysql 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-ncurses 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-odbc 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-pear 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-pgsql 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-snmp 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::desktop php-xmlrpc 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-debuginfo 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-devel 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-domxml 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-gd 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-imap 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-ldap 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-mbstring 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-mysql 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-ncurses 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-odbc 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-pear 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-pgsql 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-snmp 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::es php-xmlrpc 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-debuginfo 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-devel 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-domxml 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-gd 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-imap 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-ldap 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-mbstring 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-mysql 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-ncurses 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-odbc 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-pear 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-pgsql 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-snmp 0 0:4.3.9-3.7
Red Hat:enterprise_linux:4::ws php-xmlrpc 0 0:4.3.9-3.7

Related vulnerabilities