Executive brief
phpxmlrpc vulnerable to argument injection
Affected products
- Packagist phpxmlrpc/phpxmlrpc
Junglewise Threat Intelligence
phpxmlrpc vulnerable to argument injection
Severity: info ยท Published 2022-12-02
Technologies: phpxmlrpc/phpxmlrpc (Packagist). Vendors: Packagist.
Related threats
- XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
- XML-RPC for PHP's `Wrapper::buildClientWrapperCode` method allows code injection via malicious `$client` argument
- XML-RPC for PHP's debugger vulnerable to possible XSS attack
- code injection in phpxmlrpc/phpxmlrpc