blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2005-1921

HIGH 7.5 CVSS 2.0
Published
July 5, 2005
Last modified
June 16, 2026
NVD status
Modified
Reported by
secalert@redhat.com
Weakness
CWE-94
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.

Affected products and versions

  • n/a n/a — Versions not specified

References

  • marc.info http://marc.info/?l=bugtraq&m=112008638320145&w=2 Third Party Advisory
  • marc.info http://marc.info/?l=bugtraq&m=112015336720867&w=2 Third Party Advisory
  • marc.info http://marc.info/?l=bugtraq&m=112605112027335&w=2 Third Party Advisory
  • pear.php.net http://pear.php.net/package/XML_RPC/download/1.3.1 Patch, Product
  • secunia.com http://secunia.com/advisories/15810 Broken Link
  • secunia.com http://secunia.com/advisories/15852 Broken Link
  • secunia.com http://secunia.com/advisories/15855 Broken Link
  • secunia.com http://secunia.com/advisories/15861 Broken Link
  • secunia.com http://secunia.com/advisories/15872 Broken Link
  • secunia.com http://secunia.com/advisories/15883 Broken Link
  • secunia.com http://secunia.com/advisories/15884 Broken Link
  • secunia.com http://secunia.com/advisories/15895 Broken Link
  • secunia.com http://secunia.com/advisories/15903 Broken Link
  • secunia.com http://secunia.com/advisories/15904 Broken Link
  • secunia.com http://secunia.com/advisories/15916 Broken Link
  • secunia.com http://secunia.com/advisories/15917 Broken Link
  • secunia.com http://secunia.com/advisories/15922 Broken Link
  • secunia.com http://secunia.com/advisories/15944 Broken Link
  • secunia.com http://secunia.com/advisories/15947 Broken Link
  • secunia.com http://secunia.com/advisories/15957 Broken Link
  • secunia.com http://secunia.com/advisories/16001 Broken Link
  • secunia.com http://secunia.com/advisories/16339 Broken Link
  • secunia.com http://secunia.com/advisories/16693 Broken Link
  • secunia.com http://secunia.com/advisories/17440 Broken Link
  • secunia.com http://secunia.com/advisories/17674 Broken Link
  • secunia.com http://secunia.com/advisories/18003 Broken Link
  • security.gentoo.org http://security.gentoo.org/glsa/glsa-200507-01.xml Third Party Advisory
  • security.gentoo.org http://security.gentoo.org/glsa/glsa-200507-06.xml Third Party Advisory
  • security.gentoo.org http://security.gentoo.org/glsa/glsa-200507-07.xml Third Party Advisory
  • securitytracker.com http://securitytracker.com/id?1015336 Broken Link, Third Party Advisory, VDB Entry
  • sourceforge.net http://sourceforge.net/project/showfiles.php?group_id=87163 Product
  • sourceforge.net http://sourceforge.net/project/shownotes.php?release_id=338803 Broken Link
  • www.ampache.org http://www.ampache.org/announce/3_3_1_2.php Broken Link
  • www.debian.org http://www.debian.org/security/2005/dsa-745 Mailing List, Third Party Advisory
  • www.debian.org http://www.debian.org/security/2005/dsa-746 Mailing List, Third Party Advisory
  • www.debian.org http://www.debian.org/security/2005/dsa-747 Mailing List, Third Party Advisory
  • www.debian.org http://www.debian.org/security/2005/dsa-789 Mailing List, Third Party Advisory
  • www.drupal.org http://www.drupal.org/security/drupal-sa-2005-003/advisory.txt Third Party Advisory
  • www.gulftech.org http://www.gulftech.org/?node=research&article_id=00087-07012005 Not Applicable, Vendor Advisory
  • www.hardened-php.net http://www.hardened-php.net/advisory-022005.php Not Applicable
  • www.mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2005:109 Patch, Third Party Advisory, Vendor Advisory
  • www.novell.com http://www.novell.com/linux/security/advisories/2005_18_sr.html Broken Link
  • www.novell.com http://www.novell.com/linux/security/advisories/2005_41_php_pear.html Broken Link
  • www.novell.com http://www.novell.com/linux/security/advisories/2005_49_php.html Broken Link
  • www.redhat.com http://www.redhat.com/support/errata/RHSA-2005-564.html Broken Link
  • www.securityfocus.com http://www.securityfocus.com/archive/1/419064/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
  • www.securityfocus.com http://www.securityfocus.com/bid/14088 Broken Link, Third Party Advisory, VDB Entry
  • www.vupen.com http://www.vupen.com/english/advisories/2005/2827 Broken Link
  • oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11294 Broken Link
  • oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A350 Broken Link
  • nvd.nist.gov Official NVD record