{"id":"GHSA-q7qq-9gx2-ggxv","aliases":[],"url":"https://o3.security/vulnerability/GHSA-q7qq-9gx2-ggxv","summary":"phpxmlrpc vulnerable to argument injection","details":"phpxmlrpc vulnerable to argument injection via  local file access in `Client:send` via manipulation of `$protocol` argument.","published":"2022-12-02T22:26:45Z","modified":"2024-11-28T05:34:26.730456Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"phpxmlrpc/phpxmlrpc","fixedVersion":"4.9.0"}],"fix":null,"references":[{"type":"WEB","url":"https://github.com/gggeek/phpxmlrpc/issues/81"},{"type":"WEB","url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/phpxmlrpc/phpxmlrpc/2022-11-28-1.yaml"},{"type":"PACKAGE","url":"https://github.com/gggeek/phpxmlrpc"},{"type":"WEB","url":"https://github.com/gggeek/phpxmlrpc/releases/tag/4.9.0"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-11-28T05:34:26.730456Z"}}