A vulnerability in the PHP XML-RPC libraries allows injection of arbitrary PHP code into eval() statements. Versions 1.1.1 and below are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39417/advisory_152005.67.txt
Source: https://packetstormsecurity.com/files/39417/Hardened-PHP-Project-Security-Advisory-2005-15.67.html