/ 
POE-Component-IRC-5.21
/ POE::Component::IRC::Plugin::Whois
Security Advisories (1)
CVE-2010-3438 (2019-11-12)

libpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can be used to execute arbitrary IRC commands by passing an argument such as \"some text\\rQUIT\" to the 'privmsg' handler, which would cause the client to disconnect from the server.

NAME

POE::Component::IRC::Plugin::Whois - A PoCo-IRC plugin that implements 'irc_whois' and 'irc_whowas' events.

DESCRIPTION

POE::Component::IRC::Plugin::Whois is the reimplementation of the 'irc_whois' and 'irc_whowas' code from POE::Component::IRC as a plugin. It is used internally by POE::Component::IRC so there is no need to use this plugin yourself.

CONSTRUCTOR

new

No arguments required. Returns an POE::Component::IRC::Plugin::Whois object.

AUTHOR

Chris "BinGOs" Williams

SEE ALSO

POE::Component::IRC

POE::Component::IRC::Plugin