A vulnerability in the PEAR XML-RPC libraries allows injection of arbitrary PHP code into eval() statements. Versions 1.3.3 and below are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39416/advisory_142005.66.txt
Source: https://packetstormsecurity.com/files/39416/Hardened-PHP-Project-Security-Advisory-2005-14.66.html