| Package | Affected versions | Patched versions |
|---|---|---|
| irc client | = 3.2.0 |
The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an (1) irc:// or (2) irc6:// URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free