high7.5
CVE-2006-7011
PHP remote file inclusion vulnerability in adminips.php in Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via a URL in the banned…
Impact
PHP remote file inclusion vulnerability in adminips.php in Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via a URL in the banned_file parameter. NOTE: CVE disputes this vulnerability because banned_file is set to a constant value
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Develooping | Flash Chat | Versions 4.5.7, 4.6, 4.6.1 |
References
- NVD record
- CVE.org record
- http://www.attrition.org/pipermail/vim/2007-February/001321.html
- http://www.securityfocus.com/archive/1/437411/30/4320/threaded
- http://www.securityfocus.com/bid/18480
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27233
- http://www.attrition.org/pipermail/vim/2007-February/001321.html
- http://www.securityfocus.com/archive/1/437411/30/4320/threaded
- http://www.securityfocus.com/bid/18480
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27233