phpWebSite XML-RPC Library Remote Code Execution Vulnerability

[Brad]

* Technical Description *

A vulnerability was identified in phpWebSite, which could be exploited by remote attackers to execute arbitrary commands. This flaw is due to an input validation error in the XML-RPC for PHP library, which could be exploited by attackers to execute arbitrary commands and compromise a vulnerable web server.

 * Affected Products *

phpWebSite version 0.10.1 and prior

 * Solution *

Patches are available via CVS

 * References *

http://www.frsirt.com/english/advisories/2005/1031