/ 
POE-Component-IRC-6.10
/ POE::Component::IRC::Plugin::Whois
Security Advisories (1)
CVE-2010-3438 (2019-11-12)

libpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can be used to execute arbitrary IRC commands by passing an argument such as \"some text\\rQUIT\" to the 'privmsg' handler, which would cause the client to disconnect from the server.

NAME

POE::Component::IRC::Plugin::Whois - A PoCo-IRC plugin that generates events for WHOIS and WHOWAS replies

DESCRIPTION

POE::Component::IRC::Plugin::Whois is the reimplementation of the irc_whois and irc_whowas code from POE::Component::IRC as a plugin. It is used internally by POE::Component::IRC so there is no need to use this plugin yourself.

METHODS

new

No arguments required. Returns a plugin object suitable for feeding to POE::Component::IRC's plugin_add method.

AUTHOR

Chris "BinGOs" Williams

SEE ALSO

POE::Component::IRC

POE::Component::IRC::Plugin