Approved changes feed: RSS · Atom

cpe:2.3:a:gggeek:phpxmlrpc:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGggeek (5eaca978-0ef9-5323-ba67-e37549bcf9fb)
ProductPhpxmlrpc (945a1f90-b100-5988-87fe-63af7a442eed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/gggeek/phpxmlrpc purl2cpe 2026-06-01 10:12:07.919897

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2498 vulnerable 2026-06-08 04:48:29.497210 Details available
Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.
Published: 2005-08-15T04:00:00.000Z
Updated: 2024-08-07T22:30:01.018Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1921 vulnerable 2026-06-08 04:48:27.885757 Details available
Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.
Published: 2005-07-01T04:00:00.000Z
Updated: 2024-08-07T22:06:57.671Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.