Rule:  --Sid:2356--Summary:This event is generated when an attempt is made to exploit a knownvulnerability in the PHP web application WebChat.--Impact:Execution of arbitrary code on the affected system--Detailed Information:WebChat contains a flaw such that it may be possible for an attackerto include code of their choosing by manipulating the variableWEBCHATPATH when making a GET or POST  request  to a vulnerable system.It may be possible for an attacker to execute that code with theprivileges of the user running the webserver, usually root by supplyingtheir code in the file db_mysql.php.--Affected Systems:	Webdev Webchat 0.77--Attack Scenarios:An attacker can make a request to an affected script and define theirown path for the WEBCHATPATH variable.--Ease of Attack:Simple. No exploit software required.--False Positives:None known--False Negatives:None known--Corrective Action:Apply the appropriate vendor supplied patchesUpgrade to the latest non-affected version of the software--Contributors:Sourcefire Vulnerability Research TeamNigel Houghton <nigel.houghton@sourcefire.com>-- Additional References:--