NVD

Id
68188  
Name
CVE-2005-2498  
Description
Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2005-08-15  
Modified Date
2016-10-17  
Seq
2005-2498  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
352547 68188 CVE-2005-2498 20050815 [DRUPAL-SA-2005-004] Drupal 4.6.3 / 4.5.5 fixes critical XML-RPC issue  View
352548 68188 CVE-2005-2498 20050817 [PHPADSNEW-SA-2005-001] phpAdsNew and phpPgAds 2.0.6 fix multiple vulnerabilities  View
352549 68188 CVE-2005-2498 SUSE-SA:2005:051  View
352550 68188 CVE-2005-2498 oval:org.mitre.oval:def:9569  View
352551 68188 CVE-2005-2498 DSA-789  View
352552 68188 CVE-2005-2498 DSA-798  View
352553 68188 CVE-2005-2498 DSA-840  View
352554 68188 CVE-2005-2498 DSA-842  View
352555 68188 CVE-2005-2498 FLSA:166943  View
352556 68188 CVE-2005-2498 GLSA-200509-19  View
352557 68188 CVE-2005-2498 http://www.hardened-php.net/advisory_152005.67.html  View
352558 68188 CVE-2005-2498 SUSE-SA:2005:049  View
352559 68188 CVE-2005-2498 RHSA-2005:748  View
352560 68188 CVE-2005-2498 20050815 Advisory 15/2005: PHPXMLRPC Remote PHP Code Injection Vulnerability  View
352561 68188 CVE-2005-2498 14560  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62289 JVNDB-2005-000491 PHP に含まれる PEAR XML-RPC の不正な XMLRPC リクエスト処理による任意の PHP コードを実行される脆弱性 PHP の PEAR XML-RPC には、XMLRPC 要求、および応答処理に不備が存在するため、解釈した XML ドキュメント内の特定の XML タグがネスト化されている場合に任意の PHP コードが eval() 関数に挿入される脆弱性が存在します。 CVE-2005-2498 13702 CVE-2005-2498 68188 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000491.html 2005-08-15 2007-04-01 View