Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Drupal Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2005-1921 - Vulnerability Database
Drupal

Drupal Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2005-1921

High
Reference: CVE-2005-1921
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2005-1921
Title: Drupal Improper Control of Generation of Code (Code Injection) Vulnerability
Overview:

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier as used in products such as (1) WordPress (2) Serendipity (3) Drupal (4) egroupware (5) MailWatch (6) TikiWiki (7) phpWebSite (8) Ampache and others allows remote attackers to execute arbitrary PHP code via an XML file which is not properly sanitized before being used in an eval statement.