CVE ID:	CVE-2005-2498
Description:	Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML- RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.
Test IDs:	1.3.6.1.4.1.25623.1.0.55154   1.3.6.1.4.1.25623.1.0.55106   1.3.6.1.4.1.25623.1.0.55127   1.3.6.1.4.1.25623.1.0.55936   1.3.6.1.4.1.25623.1.0.55137   1.3.6.1.4.1.25623.1.0.55170   1.3.6.1.4.1.25623.1.0.55128   1.3.6.1.4.1.25623.1.0.55518   1.3.6.1.4.1.25623.1.0.55050   1.3.6.1.4.1.25623.1.0.55198   1.3.6.1.4.1.25623.1.0.55581   1.3.6.1.4.1.25623.1.0.55517   1.3.6.1.4.1.25623.1.0.55153
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2498 14560 http://www.securityfocus.com/bid/14560 16431 http://secunia.com/advisories/16431 16432 http://secunia.com/advisories/16432 16441 http://secunia.com/advisories/16441 16460 http://secunia.com/advisories/16460 16465 http://secunia.com/advisories/16465 16468 http://secunia.com/advisories/16468 16469 http://secunia.com/advisories/16469 16491 http://secunia.com/advisories/16491 16550 http://secunia.com/advisories/16550 16558 http://secunia.com/advisories/16558 16563 http://secunia.com/advisories/16563 16619 http://secunia.com/advisories/16619 16635 http://secunia.com/advisories/16635 16693 http://secunia.com/advisories/16693 16976 http://secunia.com/advisories/16976 17053 http://secunia.com/advisories/17053 17066 http://secunia.com/advisories/17066 17440 http://secunia.com/advisories/17440 20050815 Advisory 15/2005: PHPXMLRPC Remote PHP Code Injection Vulnerability http://www.securityfocus.com/archive/1/408125 20050815 [DRUPAL-SA-2005-004] Drupal 4.6.3 / 4.5.5 fixes critical XML-RPC issue http://marc.info/?l=bugtraq&m=112412415822890&w=2 20050817 [PHPADSNEW-SA-2005-001] phpAdsNew and phpPgAds 2.0.6 fix multiple vulnerabilities http://marc.info/?l=bugtraq&m=112431497300344&w=2 DSA-789 http://www.debian.org/security/2005/dsa-789 DSA-798 http://www.debian.org/security/2005/dsa-798 DSA-840 http://www.debian.org/security/2005/dsa-840 DSA-842 http://www.debian.org/security/2005/dsa-842 FLSA:166943 http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html GLSA-200509-19 http://www.gentoo.org/security/en/glsa/glsa-200509-19.xml RHSA-2005:748 http://www.redhat.com/support/errata/RHSA-2005-748.html SUSE-SA:2005:049 http://www.novell.com/linux/security/advisories/2005_49_php.html SUSE-SA:2005:051 http://marc.info/?l=bugtraq&m=112605112027335&w=2 http://www.hardened-php.net/advisory_152005.67.html http://www.hardened-php.net/advisory_152005.67.html oval:org.mitre.oval:def:9569 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9569