CVE-2005-1921
PEAR XML_RPC < 1.3.0 and PHPXMLRPC < 1.1 - Remote Code Execution via Unsanitized XML Input
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2005-1921.
PoCs published by Metasploit, Mike Rifone, dukenn, including Metasploit module exploits/unix/webapp/php_xmlrpc_eval.
AI-analyzed exploit summary This Metasploit module exploits CVE-2005-1921, an arbitrary code execution vulnerability in PHP XML-RPC implementations. It crafts a malicious XML-RPC request to execute arbitrary commands via the `passthru` function, targeting applications like Drupal, WordPress, and others.
Description
Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.
Exploits (6)
This Metasploit module exploits CVE-2005-1921, an arbitrary code execution vulnerability in PHP XML-RPC implementations. It crafts a malicious XML-RPC request to execute arbitrary commands via the `passthru` function, targeting applications like Drupal, WordPress, and others.
This exploit leverages a command injection vulnerability in XML-RPC implementations (phpxmlrpc and PEAR XML_RPC) by crafting a malicious XML payload. The payload injects a system command into the XML structure, allowing remote command execution on the target server.
This exploit targets CVE-2005-1921, a command injection vulnerability in XMLRPC implementations. It sends a maliciously crafted XML payload to execute arbitrary commands on the target system via a POST request.
This exploit demonstrates a remote code execution vulnerability in PHPXMLRPC <= 1.1 due to unsanitized data being passed into an eval() call. The PoC XML payload escapes the eval() context using single quotes to execute arbitrary PHP code.
This Perl script exploits CVE-2005-1921, a command injection vulnerability in XML-RPC implementations (e.g., PHP XML-RPC libraries). It crafts a malicious XML-RPC request to execute arbitrary commands via the `system()` function by injecting into the `methodName` parameter.
This Metasploit module exploits a PHP XML-RPC arbitrary code execution vulnerability (CVE-2005-1921) by injecting malicious commands into XML-RPC requests. It targets multiple PHP-based applications like Drupal, WordPress, and others.