CVE-2008-2841

2008-06-2419:00:00

mitre

www.cve.org

7.8 High

AI Score

Confidence

Low

0.15 Low

EPSS

Percentile

95.9%

JSON

Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI.

References

forum.xchat.org/viewtopic.php?t=4218

secunia.com/advisories/30695

www.securityfocus.com/bid/29696

exchange.xforce.ibmcloud.com/vulnerabilities/43065

www.exploit-db.com/exploits/5795