Lucene search
N/APATCHSTACK:1BD16B094D84675D3BCABB338B2526FEHistoryJun 08, 2005 - 12:00 a.m.
WordPress <= 1.3.0 - Eval Injection
2005-06-0800:00:00
N/A
patchstack.com
14
EPSS
0.956
Percentile
99.4%
Because of this vulnerability in PEAR XML_RPC, attackers can execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.
Solution
Update the WordPress to the latest available version (at least 1.4).
Related
nessus
nessus
Mandrake Linux Security Advisory : php-pear (MDKSA-2005:109)
2005-07-01 00:00:00
Ubuntu 4.10 / 5.04 : php4, php4-universe vulnerability (USN-147-1)
2006-01-15 00:00:00
GLSA-200507-07 : phpWebSite: Multiple vulnerabilities
2005-07-10 00:00:00
gentoo
gentoo
WordPress: Multiple vulnerabilities
2005-07-04 00:00:00
PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability
2005-07-03 00:00:00
phpWebSite: Multiple vulnerabilities
2005-07-10 00:00:00
openvas
openvas
FreeBSD Ports: pear-XML_RPC
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200507-07 (phpwebsite)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200507-02 (wordpress)
2008-09-24 00:00:00
securityvulns
securityvulns
[Full-disclosure] [ GLSA 200507-06 ] TikiWiki: Arbitrary command execution through XML-RPC
2005-07-07 00:00:00
Advisory 02/2005: Remote code execution in Serendipity
2005-06-30 00:00:00
Advisory 02/2005: Remote code execution in Serendipity
2005-07-01 00:00:00
nvd
nvd
ubuntucve
ubuntucve
CVE-2005-1921
2005-07-05 00:00:00
CVE-2005-2498
2005-08-15 00:00:00
checkpoint_advisories
checkpoint_advisories
LupperA XMLRPC Propagation Request Code Execution - Ver2 (CVE-2005-1921)
2015-03-26 00:00:00
debian
debian
suse
suse
remote code execution in php/pear XML::RPC
2005-07-08 15:32:35
remote code execution in php4, php5
2005-08-30 14:35:22
local command execution, authentication bypass, in apache2
2005-09-12 13:00:50
wpvulndb
wpvulndb
WordPress <= 1.5.1.2 - XMLRPC Eval Injection
2005-06-29 00:00:00
exploitdb
exploitdb
XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Command Execution (3)
2005-07-04 00:00:00
PHPXMLRPC < 1.1 - Remote Code Execution
2015-07-02 00:00:00
XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Command Execution (2)
2005-07-04 00:00:00
slackware
slackware
PHP
2005-07-11 17:25:23
cvelist
cvelist
CVE-2005-1921
2005-07-01 04:00:00
CVE-2005-2498
2005-08-15 04:00:00
packetstorm
packetstorm
PHP XML-RPC Arbitrary Code Execution
2009-10-30 00:00:00
metasploit
metasploit
PHP XML-RPC Arbitrary Code Execution
2007-02-18 00:10:39
freebsd
freebsd
pear-XML_RPC -- arbitrary remote code execution
2005-06-29 00:00:00
drupal -- PHP code execution vulnerabilities
2005-06-29 00:00:00
postnuke -- multiple vulnerabilities
2005-05-27 00:00:00
ubuntu
ubuntu
PHP XMLRPC vulnerability
2005-07-05 00:00:00
exploitpack
exploitpack
PHPXMLRPC 1.1 - Remote Code Execution
2015-07-02 00:00:00
cve
cve
cert
cert
Multiple PHP XML-RPC implementations vulnerable to code injection
2005-07-06 00:00:00
centos
centos
php security update
2005-07-07 20:36:04
redhat
redhat
(RHSA-2005:564) php security update
2005-07-07 00:00:00
osv
osv
drupal - arbitrary command execution
2005-07-10 00:00:00
php4 - several
2005-08-29 00:00:00