PHPXMLRPC is vulnerable to a very high risk remote PHP code execution vulnerability that may allow for an attacker to compromise a vulnerable webserver. The vulnerability is the result of unsanitized data being passed directly into an eval() call in the parseRequest() function of the XMLRPC server. Versions 1.1 and below are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38394/phpxmlrpc11.txt
Source: https://packetstormsecurity.com/files/38394/phpxmlrpc11.txt.html