CVE-2005-2498: Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple pro...

Security readout for executives and security teams

CVE-2005-2498 is an old but serious remote code execution issue in PHPXMLRPC 1.1.1 and earlier. If a vulnerable XML-RPC endpoint is still reachable, a remote attacker could cause the server to run arbitrary PHP code. The main business risk is compromise of legacy PHP applications or forgotten embedded library copies. Exposure is most likely in legacy PHP applications or vendor packages that bundled PHPXMLRPC 1.1.1 or earlier, especially public XML-RPC endpoints. Modern systems are only in scope if they retain old code, packaged dependencies, or unmaintained deployments from that era. Prioritize remediation where legacy PHP or XML-RPC endpoints remain internet-facing. The vulnerability is old, but the impact is severe if forgotten systems still expose it. Asset discovery is the key first step. Mitigation focus: Inventory PHP applications for PHPXMLRPC or PEAR XML-RPC usage.; Apply relevant vendor updates from Drupal, phpAdsNew/phpPgAds, Debian, Red Hat, or SUSE advisories.; Disable or restrict unused XML-RPC endpoints until upgraded..

Prepared

Jun 29, 2026, 18:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.