CVE-2007-1394

Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbitrary PHP code via the Chat Name field, which is inserted into online.txt and included by users.php. NOTE: some of these details are obtained from third party information.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://osvdb.org/33890
http://secunia.com/advisories/24433	Exploit Vendor Advisory
http://www.securityfocus.com/bid/22865	Exploit Vendor Advisory
http://www.vupen.com/english/advisories/2007/0871
https://exchange.xforce.ibmcloud.com/vulnerabilities/32882
https://www.exploit-db.com/exploits/3428
http://osvdb.org/33890
http://secunia.com/advisories/24433	Exploit Vendor Advisory
http://www.securityfocus.com/bid/22865	Exploit Vendor Advisory
http://www.vupen.com/english/advisories/2007/0871
https://exchange.xforce.ibmcloud.com/vulnerabilities/32882
https://www.exploit-db.com/exploits/3428

Configurations

Configuration 1 (hide)

cpe:2.3:a:flat_chat:flat_chat:2.0:*:*:*:*:*:*:*

History

21 Nov 2024, 00:28

Type	Values Removed	Values Added
References	~~() http://osvdb.org/33890 -~~	() http://osvdb.org/33890 -
References	~~() http://secunia.com/advisories/24433 - Exploit, Vendor Advisory~~	() http://secunia.com/advisories/24433 - Exploit, Vendor Advisory
References	~~() http://www.securityfocus.com/bid/22865 - Exploit, Vendor Advisory~~	() http://www.securityfocus.com/bid/22865 - Exploit, Vendor Advisory
References	~~() http://www.vupen.com/english/advisories/2007/0871 -~~	() http://www.vupen.com/english/advisories/2007/0871 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/32882 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/32882 -
References	~~() https://www.exploit-db.com/exploits/3428 -~~	() https://www.exploit-db.com/exploits/3428 -

Information

Published : 2007-03-10 22:19

Updated : 2024-11-21 00:28

NVD link : CVE-2007-1394

Mitre link : CVE-2007-1394

CVE.ORG link : CVE-2007-1394

JSON object : View

Products Affected

flat_chat

flat_chat

CWE

NVD-CWE-Other

{"id": "CVE-2007-1394", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-03-10T22:19:00.000", "references": [{"url": "http://osvdb.org/33890", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/24433", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22865", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/0871", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32882", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/3428", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/33890", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/24433", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/22865", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/0871", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32882", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/3428", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbitrary PHP code via the Chat Name field, which is inserted into online.txt and included by users.php. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n directa de c\u00f3digo est\u00e1tico en startsession.php en Flat Chat 2.0 permite a atacantes remotos ejecutar c\u00f3digo PHP de su elecci\u00f3n a trav\u00e9s del campo Chat Name, el cual es insertado dentro de online.txt e incluido por los usuarios. NOTA: algunos de estos detalles se obtuvieron de una tercera fuente de informaci\u00f3n."}], "lastModified": "2024-11-21T00:28:12.183", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:flat_chat:flat_chat:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83A6083D-094D-4AB0-8F0C-85BAF1760BAC"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}