Every CVE Search/ Get API key

CVE-2005-2498

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in...

7.5 HighFix available

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.

Exploit likelihood

5.09%Up 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.

Record
CVE-2005-2498
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-94
Updated
2026-11-02
CVE List No score

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.

Record
CVE-2005-2498
Updated
2026-11-02
EUVDEUVD-2005-2499 No score

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.

Record
EUVD-2005-2499
Updated
2026-11-03
GitHub AdvisoriesGHSA-mcp5-3g3r-5wm5 No score

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in...

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.

Record
GHSA-mcp5-3g3r-5wm5
Weakness
CWE-94
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php4
Debian:3.0
 before 4:4.1.2-7.woody5, plus listed versions
4:4.1.2-74:4.1.2-7.0.14:4.1.2-7.woody34:4.1.2-7.woody44:4.1.2-7woody14:4.1.2-7woody2
4:4.1.2-7.woody5
php4
Debian:3.1
 before 4:4.3.10-16, plus listed versions
4:4.3.10-15
4:4.3.10-16
phpgroupware
Debian:3.1
 before 0.9.16.005-3.sarge2, plus listed versions
0.9.16.005-30.9.16.005-3.sarge00.9.16.005-3.sarge1
0.9.16.005-3.sarge2
drupal
Debian:3.1
 before 4.5.3-4, plus listed versions
4.5.3-24.5.3-3
4.5.3-4
egroupware
Debian:3.1
 before 1.0.0.007-2.dfsg-2sarge2, plus listed versions
1.0.0.007-2.dfsg-21.0.0.007-2.dfsg-2sarge1
1.0.0.007-2.dfsg-2sarge2
php4
Debian:4.0
 before 4:4.3.10-16etch1
4:4.3.10-16etch1
php
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-devel
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-imap
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
Show 88 moreShow less
Affected packages
PackageAffectedFixed
php-ldap
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-mysql
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-odbc
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-pgsql
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-devel
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-imap
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-ldap
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-mysql
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-odbc
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-pgsql
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-devel
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-imap
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-ldap
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-mysql
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-odbc
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-pgsql
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-devel
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-imap
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-ldap
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-mysql
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-odbc
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php-pgsql
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-25.ent
0:4.3.2-25.ent
php
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-devel
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-domxml
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-gd
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-imap
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-ldap
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-mbstring
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-mysql
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-ncurses
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-odbc
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-pear
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-pgsql
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-snmp
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-xmlrpc
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.8
0:4.3.9-3.8
php
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-devel
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-domxml
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-gd
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-imap
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-ldap
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-mbstring
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-mysql
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-ncurses
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-odbc
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-pear
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-pgsql
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-snmp
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-xmlrpc
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.8
0:4.3.9-3.8
php
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-devel
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-domxml
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-gd
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-imap
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-ldap
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-mbstring
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-mysql
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-ncurses
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-odbc
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-pear
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-pgsql
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-snmp
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-xmlrpc
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.8
0:4.3.9-3.8
php
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-devel
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-domxml
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-gd
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-imap
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-ldap
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-mbstring
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-mysql
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-ncurses
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-odbc
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-pear
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-pgsql
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-snmp
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8
php-xmlrpc
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.8
0:4.3.9-3.8

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-2498 is a high vulnerability (CVSS 7.5) in Gggeek Phpxmlrpc, published July 4, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.09%, the 92nd percentile. Fixed in php4 4:4.1.2-7.woody5.

References

Show 36 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open