Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

Chatness admin page lets admins add code to HTML

CVE-2007-2148 · published 19 years ago
Summary

The admin/save.php file in Chatness 2.5.3 and earlier allows a user who is already logged in as an administrator to place PHP code into .html files such as head.html or foot.html. When those files are later loaded they are executed, which could let the administrator run unwanted scripts on the server. Require only trusted administrators or upgrade to a version where this behavior is fixed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
stephen_craton chatness <= 2.5.3
cpe:2.3:a:stephen_craton:chatness:*:*:*:*:*:*:*:*
Original advisory text
Direct static code injection vulnerability in admin/save.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier allows remote authenticated administrators to inject PHP code into .html fil...
Direct static code injection vulnerability in admin/save.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier allows remote authenticated administrators to inject PHP code into .html files via the html parameter, as demonstrated by head.html and foot.html, which are included and executed upon a direct request for index.php. NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote unauthenticated attackers.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.5 Medium
Exploitation
2% chance of attack within 30 days
Timeline
Published19 Apr 2007
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2007-2148 · NVD
Track software like this
Free during beta