CVE-2005-1869 Code injection in n/a

High 7.5 Published 7 Jun 2005 Updated 7 Aug 2024

Remote attackers can execute arbitrary PHP code in MWChat via a remote file inclusion vulnerability in start_lobby.php.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2005-1869?

CVE-2005-1869 is a high-severity code injection vulnerability in n/a, published on 7 Jun 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

PHP remote file inclusion vulnerability in start_lobby.php in MWChat 6.x allows remote attackers to execute arbitrary PHP code via the CONFIG[MWCHAT_Libs] parameter.

Which versions are affected by CVE-2005-1869?

It affects 1 product.

Products include Appindex Mwchat.

How do I fix CVE-2005-1869?

No fix has been published for CVE-2005-1869 yet. Limit exposure of the affected software until one is available.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2005-1869 being exploited?

There is no known exploitation of CVE-2005-1869 in the wild and no public exploit code.

CVE-2005-3324 SQL injection in n/a High 7.5

Sources

Also known as GHSA-mh6g-pf49-hqgg.