CVE-2007-0485 PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP code via a URL in the WEBCHATPATH parameter.
HighCVSS 7.5
EPSS 8.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP code via a URL in the WEBCHATPATH parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webchat.org webchat | = 0.77 | No fix listed |
References
- 8206 third-party-advisory
- 20030303 WebChat (PHP) mailing-list
- 7000 vdb-entry
- 1006193 vdb-entry
- webchat-definesphp-file-include(31624) vdb-entry
- 3169 exploit