Executive brief
code injection in phpxmlrpc/phpxmlrpc
Affected products
- Packagist phpxmlrpc/phpxmlrpc
Junglewise Threat Intelligence
code injection in phpxmlrpc/phpxmlrpc
Severity: info ยท Published 2022-11-28
Technologies: phpxmlrpc/phpxmlrpc (Packagist). Vendors: Packagist.
Related threats
- XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
- XML-RPC for PHP's `Wrapper::buildClientWrapperCode` method allows code injection via malicious `$client` argument
- XML-RPC for PHP's debugger vulnerable to possible XSS attack
- phpxmlrpc vulnerable to argument injection