RCE in Drupal
CVE-2005-1921
Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.791 (99.6th percentile) — read the EPSS interpretation.
Affected products
- Drupal
- Gggeek Phpxmlrpc
- Php Xml_rpc
- Tiki Tikiwiki_cms\/groupware
- Debian Debian_linux — versions 3.1
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (Broken Link, x_refsource_OVAL, signature, vdb-entry)
- secalert@redhat.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_DEBIAN)
- secalert@redhat.com (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- secalert@redhat.com (vendor-advisory, Broken Link, x_refsource_SUSE)
- secalert@redhat.com (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- secalert@redhat.com (Broken Link, x_refsource_OVAL, signature, vdb-entry)
Frequently asked questions
- What is CVE-2005-1921?
- CVE-2005-1921 is a vulnerability in Drupal, classified under Code Injection. Published 2005-07-05.
- Is CVE-2005-1921 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.