CVE-2005-2498

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3)…

published August 15, 2005

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05091 · 92.3th percentile
Published
2005-08-15T04:00Z
EPSS history
Timeline
  • 15 AUG 04:00Z
    Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3)…
    cvelistv5