Debian Security Advisory DSA 842-1 – Stefan Esser discovered a vulnerability in the XML-RPC libraries which are also present in egroupware, a web-based groupware suite, that allows injection of arbitrary PHP code into eval() statements.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40444/dsa-842-1.txt
Source: https://packetstormsecurity.com/files/40444/Debian-Linux-Security-Advisory-842-1.html