The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected.
| Software | From | Fixed in |
|---|---|---|
| berlios / konversation | 0.15 | 0.15.x |