CVE-2005-1921
60Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 79%
da publicação à arma0 dias
Publicada no NVD1 de jul.
1ª PoC1 de jul.
metasploit29 de jun.
probabilidade de exploração
79%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
5 exploit(s) público(s)
Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 5✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1078exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1084exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16882exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1083exploitdbwww.exploit-db.com/exploits/43829não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://marc.info/?l=bugtraq&m=112008638320145&w=2http://marc.info/?l=bugtraq&m=112015336720867&w=2http://marc.info/?l=bugtraq&m=112605112027335&w=2http://pear.php.net/package/XML_RPC/download/1.3.1http://secunia.com/advisories/15810http://secunia.com/advisories/15852http://secunia.com/advisories/15855http://secunia.com/advisories/15861http://secunia.com/advisories/15872http://secunia.com/advisories/15883http://secunia.com/advisories/15884http://secunia.com/advisories/15895