Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0787. PoCs published by zenith parsec.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in X-Chat IRC client versions 1.4.2 and earlier. By embedding shell commands within backticks in a URL, an attacker can execute arbitrary commands when the victim clicks the link, due to improper shell metacharacter handling.
Description
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.
Exploits (1)
This exploit leverages a command injection vulnerability in X-Chat IRC client versions 1.4.2 and earlier. By embedding shell commands within backticks in a URL, an attacker can execute arbitrary commands when the victim clicks the link, due to improper shell metacharacter handling.