Stefan Esser has reported a vulnerability in XML-RPC, which can be exploited by malicious people to compromise a vulnerable system.

Certain XML tags that are nested in parsed documents are not properly sanitised before being used in an "eval()" call. This can be exploited to execute arbitrary PHP code on a vulnerable system.

The vulnerability has been reported in versions 1.1.1 and prior.

Solution
Update to version 1.2.

Provided and/or discovered by
Stefan Esser, Hardened-PHP Project.

Original Advisory
http://www.hardened-php.net/advisory_152005.67.html

Deep Links
Links available to Secunia VIM customers