pear-XML_RPC -- arbitrary remote code execution

Affected packages
		pear-XML_RPC	<	1.3.1

Details

GulfTech Security Research Team reports:

PEAR XML_RPC is vulnerable to a very high risk php code injection vulnerability due to unsanatized data being passed into an eval() call.

[source]

CVE Name	CVE-2005-1921
URL	http://www.gulftech.org/?node=research&article_id=00087-07012005
URL	http://www.hardened-php.net/advisory-022005.php

	
		OSZAR »