Design/Logic Flaw

2008-06-2419:41:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

0.15 Low

EPSS

Percentile

95.9%

JSON

Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI.

CPENameOperatorVersion
xchateq<= 2.8.7b

CPE	Name	Operator	Version
	xchat	eq	<= 2.8.7b

References

forum.xchat.org/viewtopic.php?t=4218

secunia.com/advisories/30695

www.securityfocus.com/bid/29696

exchange.xforce.ibmcloud.com/vulnerabilities/43065

www.exploit-db.com/exploits/5795