NVD

Id
53578  
Name
CVE-2007-1394  
Description
Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbitrary PHP code via the Chat Name field, which is inserted into online.txt and included by users.php. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-03-10  
Modified Date
2011-03-07  
Seq
2007-1394  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271510 53578 CVE-2007-1394 3428  View
271511 53578 CVE-2007-1394 22865  View
271512 53578 CVE-2007-1394 ADV-2007-0871  View
271513 53578 CVE-2007-1394 flatchat-startsession-code-execution(32882)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52988 JVNDB-2007-001680 Flat Chat の startsession.php における PHP リモートファイルインクルージョンの脆弱性 Flat Chat の startsession.php には、任意の PHP コードを実行される脆弱性が存在します。 CVE-2007-1394 24749 CVE-2007-1394 53578 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001680.html 2007-03-10 2012-06-26 View