A flaw has been discovered in the third-party XML-RPC library included with Drupal. An attacker could execute arbitrary PHP code on a target site.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38378/DRUPAL-SA-2005-003.txt
Source: https://packetstormsecurity.com/files/38378/DRUPAL-SA-2005-003.txt.html