high7.5Public exploit code
CVE-2007-0485
PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP code via a URL in the WEBCHATPATH param…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebChat 0.77 - 'defines.php?WEBCHATPATH' Remote File Inclusion2007-01-21 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP code via a URL in the WEBCHATPATH parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webchat.Org | Webchat | Version 0.77 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/8206
- http://www.securityfocus.com/archive/1/313610/30/25700/threaded
- http://www.securityfocus.com/bid/7000
- http://www.securitytracker.com/id?1006193
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31624
- https://www.exploit-db.com/exploits/3169
- http://secunia.com/advisories/8206
- http://www.securityfocus.com/archive/1/313610/30/25700/threaded
- http://www.securityfocus.com/bid/7000
- http://www.securitytracker.com/id?1006193
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31624
- https://www.exploit-db.com/exploits/3169