critical10.0Public exploit code
CVE-2008-1989
PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_globals is enabled, allows remote attack…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- e107 module 123 flash chat 6.8.0 - Remote File Inclusion2008-04-17 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 123flashchat | 123 Flash Chat Module | Version 6.8.0 |
| E107 | E107 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29870
- http://www.securityfocus.com/bid/28828
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41867
- https://www.exploit-db.com/exploits/5459
- http://secunia.com/advisories/29870
- http://www.securityfocus.com/bid/28828
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41867
- https://www.exploit-db.com/exploits/5459