{"id":"CVE-2005-1921","aliases":["DEBIAN-CVE-2005-1921","DSA-745-1","DSA-746-1","DSA-747-1","DSA-789-1","DTSA-15-1","EUVD-2005-1923","GHSA-7mjj-9265-43wm","RHSA-2005:564"],"status":"published","title":"Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and...","description":"Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.79071,"percentile":0.99601,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-94"],"published":"2005-07-01T04:00:00Z","modified":"2026-06-26T10:03:26Z","exploits":[{"source":"metasploit","id":"exploit/unix/webapp/php_xmlrpc_eval","title":"PHP XML-RPC Arbitrary Code Execution","type":"exploit","platform":"Unix","date":"2005-06-29","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/unix/webapp/php_xmlrpc_eval"},{"source":"exploitdb","id":"EDB-1078","title":"XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Code Injection","type":"webapps","platform":"php","date":"2005-07-01","verified":true,"url":"https://www.exploit-db.com/exploits/1078"},{"source":"exploitdb","id":"EDB-1083","title":"XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Command Execution (2)","type":"webapps","platform":"php","date":"2005-07-04","verified":true,"url":"https://www.exploit-db.com/exploits/1083"},{"source":"exploitdb","id":"EDB-1084","title":"XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Command Execution (3)","type":"webapps","platform":"php","date":"2005-07-04","verified":true,"url":"https://www.exploit-db.com/exploits/1084"},{"source":"exploitdb","id":"EDB-16882","title":"XML-RPC Library 1.3.0 - 'xmlrpc.php' Arbitrary Code Execution (Metasploit)","type":"webapps","platform":"php","date":"2010-07-25","verified":true,"url":"https://www.exploit-db.com/exploits/16882"},{"source":"exploitdb","id":"EDB-43829","title":"PHPXMLRPC \u003c 1.1 - Remote Code Execution","type":"webapps","platform":"php","date":"2015-07-02","url":"https://www.exploit-db.com/exploits/43829"}],"fixes":[{"ecosystem":"Debian:3.1","package":"phpgroupware","fixed_in":["0.9.16.005-3.sarge0"],"sources":["osv"]},{"ecosystem":"Debian:3.1","package":"egroupware","fixed_in":["1.0.0.007-2.dfsg-2sarge1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:3.1","package":"drupal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-3"}]}],"versions":["4.5.3-2"],"bundled":2},{"source":"osv","ecosystem":"Debian:3.0","package":"phpgroupware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.14-0.RC3.2.woody3","0.9.14-0.RC3.2.woody4","0.9.14-0.RC3.2.woody5","0.9.14-0.RC3.2.woody6","0.9.16.005-1","0.9.16.005-2","0.9.16.005-3","0.9.16.005-3.sarge0","0.9.16.005-3.sarge1","0.9.16.005-3.sarge2","0.9.16.005-3.sarge3","0.9.16.005-3.sarge4","0.9.16.005-3.sarge5","0.9.16.005-4","0.9.16.005-5","0.9.16.006-1","0.9.16.008-1","0.9.16.008-2","0.9.16.009-1","0.9.16.010+dfsg-0.1","0.9.16.010-1","0.9.16.011-1","0.9.16.011-2","0.9.16.011-2.1","0.9.16.011-2.2","0.9.16.011-3","0.9.16.011-3lenny2","0.9.16.012+dfsg-1","0.9.16.012-1","1:0.9.16.012+dfsg-1","1:0.9.16.012+dfsg-10","1:0.9.16.012+dfsg-2","1:0.9.16.012+dfsg-3","1:0.9.16.012+dfsg-4","1:0.9.16.012+dfsg-5","1:0.9.16.012+dfsg-6","1:0.9.16.012+dfsg-7","1:0.9.16.012+dfsg-8","1:0.9.16.012+dfsg-8+lenny1","1:0.9.16.012+dfsg-8+lenny2","1:0.9.16.012+dfsg-9","1:0.9.16.016+dfsg-1"]},{"source":"osv","ecosystem":"Debian:3.1","package":"phpgroupware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.16.005-3.sarge0"}]}],"versions":["0.9.16.005-3"]},{"source":"osv","ecosystem":"Debian:3.1","package":"egroupware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0.007-2.dfsg-2sarge1"}]}],"versions":["1.0.0.007-2.dfsg-2"]},{"source":"osv","ecosystem":"Debian:3.0","package":"php4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.1.2-7.woody5"}]}],"versions":["4:4.1.2-7","4:4.1.2-7.0.1","4:4.1.2-7.woody3","4:4.1.2-7.woody4","4:4.1.2-7woody1","4:4.1.2-7woody2"],"bundled":3},{"source":"osv","ecosystem":"Debian:3.1","package":"php4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.3.10-16"}]}],"versions":["4:4.3.10-15"],"bundled":3},{"source":"osv","ecosystem":"Debian:4.0","package":"php4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.3.10-16etch1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-24.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-domxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-domxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-domxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-domxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-3.7"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"drupal","product":"drupal"},{"vendor":"gggeek","product":"phpxmlrpc"},{"vendor":"php","product":"xml_rpc"},{"vendor":"tiki","product":"tikiwiki_cms\\/groupware"}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A350","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link"]},{"url":"http://www.debian.org/security/2005/dsa-789","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/15947","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/15852","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/15944","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2005_18_sr.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/15883","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/15872","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/15895","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11294","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link"]},{"url":"http://securitytracker.com/id?1015336","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2005/dsa-746","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/17674","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.gulftech.org/?node=research\u0026article_id=00087-07012005","tags":["x_refsource_MISC","x_transferred","Not Applicable","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2005/2827","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/15917","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.debian.org/security/2005/dsa-747","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2005_41_php_pear.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link"]},{"url":"http://www.hardened-php.net/advisory-022005.php","tags":["x_refsource_MISC","x_transferred","Not Applicable"]},{"url":"http://www.securityfocus.com/archive/1/419064/100/0/threaded","tags":["vendor-advisory","x_refsource_HP","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq\u0026m=112605112027335\u0026w=2","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/15957","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.ampache.org/announce/3_3_1_2.php","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/15810","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200507-01.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://www.drupal.org/security/drupal-sa-2005-003/advisory.txt","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/14088","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/16693","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://marc.info/?l=bugtraq\u0026m=112008638320145\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=112015336720867\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200507-07.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/15904","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/15903","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2005_49_php.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=338803","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/17440","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/15922","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/15884","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/15916","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-564.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Broken Link"]},{"url":"http://pear.php.net/package/XML_RPC/download/1.3.1","tags":["x_refsource_MISC","x_transferred","Patch","Product"]},{"url":"http://secunia.com/advisories/16001","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://sourceforge.net/project/showfiles.php?group_id=87163","tags":["x_refsource_CONFIRM","x_transferred","Product"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:109","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred","Patch","Third Party Advisory","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200507-06.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-745","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/15855","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/16339","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/18003","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/15861","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1921","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7mjj-9265-43wm"},{"url":"https://access.redhat.com/errata/RHSA-2005:564","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=158904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=159000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=162044","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_564.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=158995","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1751","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617676","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1921","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2005-1921","description":"Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.","status":"published","published":"2005-07-01T04:00:00Z","modified":"2024-08-07T22:06:57.671Z","updated_at":"2026-11-02T14:33:39.586409Z"}],"euvd":[{"id":"EUVD-2005-1923","description":"Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.","status":"published","published":"2005-07-01T04:00:00Z","modified":"2024-08-07T22:06:57Z","updated_at":"2026-11-03T01:15:32.821479Z"}],"ghsa":[{"id":"GHSA-7mjj-9265-43wm","title":"Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and...","description":"Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.","status":"published","published":"2022-05-01T02:03:16Z","modified":"2026-03-21T05:36:39Z","cwes":["CWE-94"],"updated_at":"2026-11-02T15:06:45.356317Z"}],"nvd":[{"id":"CVE-2005-1921","description":"Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.","status":"published","published":"2005-07-05T04:00:00Z","modified":"2026-06-16T22:13:55.183Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:00:55.600202Z"}],"osv":[{"id":"DSA-745-1","title":"drupal - arbitrary command execution","status":"published","published":"2005-07-10T00:00:00Z","modified":"2026-03-09T01:21:34.878397Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"DSA-746-1","title":"phpgroupware - remote command execution","status":"published","published":"2005-07-14T00:00:00Z","modified":"2026-03-09T02:08:50.869672Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"DSA-747-1","title":"egroupware - input validation error","status":"published","published":"2005-07-10T00:00:00Z","modified":"2026-03-09T02:09:36.841044Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"DSA-789-1","title":"php4 - several","status":"published","published":"2005-08-29T00:00:00Z","modified":"2026-03-09T02:11:41.525137Z","updated_at":"2026-11-02T15:46:18.716547Z"},{"id":"DTSA-15-1","title":"php4 - several vulnerabilities","status":"published","published":"2005-09-13T00:00:00Z","modified":"2026-03-09T01:01:41.768137Z","updated_at":"2026-11-02T15:46:18.716547Z"},{"id":"RHSA-2005:564","title":"Red Hat Security Advisory: php security update","status":"published","published":"2024-09-15T15:39:04Z","modified":"2026-06-26T10:03:26Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}