10

CVE-2007-1394

Exploit
Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbitrary PHP code via the Chat Name field, which is inserted into online.txt and included by users.php.  NOTE: some of these details are obtained from third party information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Flat Chat ≫ Flat Chat Version2.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.29% 0.898
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://osvdb.org/33890
http://secunia.com/advisories/24433
Vendor Advisory
Exploit
http://www.securityfocus.com/bid/22865
Vendor Advisory
Exploit
http://www.vupen.com/english/advisories/2007/0871
https://exchange.xforce.ibmcloud.com/vulnerabilities/32882
https://www.exploit-db.com/exploits/3428