HTTP: PHP XML Command Execution

This signature detects attempts to exploit a known vulnerability against an XML transmission. Attackers can craft a malicious command injection that can lead to arbitrary code execution within the context of the Web server. Multiple Content Management Systems using PHP might be vulnerable to this family of attacks.

Extended Description

XML-RPC for PHP is affected by a remote code-injection vulnerability. An attacker may exploit this issue to execute arbitrary commands or code in the context of the webserver. This may facilitate various attacks, including unauthorized remote access. XML-RPC for PHP 1.1 and prior versions are affected by this issue. Other applications using this library are also affected.

Affected Products

Nucleus_cms nucleus_cms

References

BugTraq: 14088

CVE: CVE-2005-1921

URL: http://www.gulftech.org/?node=research&article_id=00088-07022005

Short Name

HTTP:PHP:PHP-XML-CMD

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: PHP XML Command Execution

Extended Description

Affected Products

References

Found a potential security threat?