CVE-2005-0129: Berlios Konversation

High severity, CVSS 7.5. EPSS: 10.3% chance of exploitation in the next 30 days.

The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected.

Affected products

  • Berlios Konversation: version 0.15 only

Published 2005-04-14. Last modified 2026-06-16.