high7.5Public exploit code
CVE-2006-5837
Static code injection vulnerability in chat_panel.php in the SimpleChat 1.0.0 module for iWare Professional CMS allows remote attackers to inject arbitrary PHP…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- iWare Pro 5.0.4 - 'chat_panel.php' Remote Code Execution2006-11-07 · webapps · php · Verified
Impact
Static code injection vulnerability in chat_panel.php in the SimpleChat 1.0.0 module for iWare Professional CMS allows remote attackers to inject arbitrary PHP code into chat_log.php via the msg parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simplechat | Simplechat | Version 1.0.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/22748
- http://www.securityfocus.com/bid/20947
- http://www.vupen.com/english/advisories/2006/4376
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30078
- https://www.exploit-db.com/exploits/2733
- http://secunia.com/advisories/22748
- http://www.securityfocus.com/bid/20947
- http://www.vupen.com/english/advisories/2006/4376
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30078
- https://www.exploit-db.com/exploits/2733