NVD

Id
67639  
Name
CVE-2005-1921  
Description
Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-07-05  
Modified Date
2016-10-17  
Seq
2005-1921  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
350050 67639 CVE-2005-1921 20050629 Advisory 02/2005: Remote code execution in Serendipity  View
350051 67639 CVE-2005-1921 20050629 [DRUPAL-SA-2005-003] Drupal 4.6.2 / 4.5.4 fixes critical XML-RPC issue  View
350052 67639 CVE-2005-1921 SUSE-SA:2005:051  View
350053 67639 CVE-2005-1921 oval:org.mitre.oval:def:11294  View
350054 67639 CVE-2005-1921 oval:org.mitre.oval:def:350  View
350055 67639 CVE-2005-1921 http://pear.php.net/package/XML_RPC/download/1.3.1  View
350056 67639 CVE-2005-1921 GLSA-200507-01  View
350057 67639 CVE-2005-1921 GLSA-200507-06  View
350058 67639 CVE-2005-1921 GLSA-200507-07  View
350059 67639 CVE-2005-1921 1015336  View
350060 67639 CVE-2005-1921 http://sourceforge.net/project/showfiles.php?group_id=87163  View
350061 67639 CVE-2005-1921 http://sourceforge.net/project/shownotes.php?release_id=338803  View
350062 67639 CVE-2005-1921 http://www.ampache.org/announce/3_3_1_2.php  View
350063 67639 CVE-2005-1921 DSA-745  View
350064 67639 CVE-2005-1921 DSA-746  View
350065 67639 CVE-2005-1921 DSA-747  View
350066 67639 CVE-2005-1921 DSA-789  View
350067 67639 CVE-2005-1921 http://www.drupal.org/security/drupal-sa-2005-003/advisory.txt  View
350068 67639 CVE-2005-1921 http://www.gulftech.org/?node=research&article_id=00087-07012005  View
350069 67639 CVE-2005-1921 http://www.hardened-php.net/advisory-022005.php  View
350070 67639 CVE-2005-1921 MDKSA-2005:109  View
350071 67639 CVE-2005-1921 SUSE-SR:2005:018  View
350072 67639 CVE-2005-1921 SUSE-SA:2005:041  View
350073 67639 CVE-2005-1921 SUSE-SA:2005:049  View
350074 67639 CVE-2005-1921 RHSA-2005:564  View
350075 67639 CVE-2005-1921 HPSBTU02083  View
350076 67639 CVE-2005-1921 14088  View
350077 67639 CVE-2005-1921 ADV-2005-2827  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62207 JVNDB-2005-000409 PEAR XML_RPC および PHPXMLRPC における任意の PHP コードを実行される脆弱性 PEAR XML_RPC には、XML ドキュメント内に含まれる特定の文字列が適切にサニタイズされずに eval() 関数で使用される脆弱性が存在します。 CVE-2005-1921 13125 CVE-2005-1921 67639 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000409.html 2005-06-29 2007-04-01 View