RSS   Vulnerabilities for 'Xml rpc'   RSS

2006-02-23
 
CVE-2006-0868

CWE-Other
 
 
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."

 
2005-07-05
 
CVE-2005-1921

CWE-Other
 
 
Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.

 

 >>> Vendor: PEAR 10 Products
Xml rpc
MAIL
PEAR
Text password
Pear liveuser
Pear archive tar
Pear archive zip
Structures datagrid datasource mdb2
Html ajax
Crypt gpg

Copyright 2024, cxsecurity.com

 

Back to Top