vendor:
by:
hdm, cazz
N/A
CVSS
N/A
Arbitrary Code Execution
CWE
Product Name:
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE: CVE-2005-1921
CPE:
Metasploit:
https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2005-2498/, https://www.rapid7.com/db/vulnerabilities/freebsd-vid-e65ad1bf-0d8b-11da-90d0-00304823c0d3/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2005-2498/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2005-1921/, https://www.rapid7.com/db/vulnerabilities/freebsd-vid-523fad14-eb9d-11d9-a8bd-000cf18bbe54/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2005-1921/
Platforms Tested: unix, solaris
2005
PHP XML-RPC Arbitrary Code Execution
This module exploits an arbitrary code execution flaw discovered in many implementations of the PHP XML-RPC module. This flaw is exploitable through a number of PHP web applications, including but not limited to Drupal, Wordpress, Postnuke, and TikiWiki.