CVE-2005-2498

Name of the Vulnerable Software and Affected Versions PHPXMLRPC versions 1.1.1 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document. These tags are injected into an eval function call. This is exploited by using specific nested XML tags that should not be nested, allowing for the execution of arbitrary code.

Recommendations For PHPXMLRPC versions 1.1.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.