PEAR XML_RPC Remote PHP Code Injection Vulnerability
Posted on Thursday, August 25, 2005 @ 18:25:36 AST
Topic: advisories
|
 hardened-php.net :
PEAR XML_RPC is the PEAR-ified version
of Useful Inc's XML-RPC
for PHP, which is a PHP implementation of the XML-RPC protocol.
It has support for HTTP transport, proxies and authentication.
After Gulftech released their PHP code injection advisory in the
end of June 2005 we sheduled the code for an audit from our side.
Unfortunately we were able to find another vulnerability in the
XML-RPC libraries that allows injection of arbitrary PHP code
into eval() statements.
complete story
|
|
| PEAR XML_RPC Remote PHP Code Injection Vulnerability | Login/Create an Account | 0 comments | | | The comments are owned by the poster. We aren't responsible for their content. |
|
|
| |
| Article Rating | Average Score: 0
Votes: 0
| |
|
