high7.5Public exploit code
CVE-2010-4988
PHP remote file inclusion vulnerability in mod_chatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote attackers to execut…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Family Connections Who is Chatting AddOn - Remote File Inclusion2010-07-03 · webapps · php
Impact
PHP remote file inclusion vulnerability in mod_chatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote attackers to execute arbitrary PHP code via a URL in the TMPL[path] parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Familycms | Family Connections Who Is Chatting | Version 2.2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/14186
- http://www.securityfocus.com/bid/41346
- http://www.vupen.com/english/advisories/2010/1687
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60057
- http://www.exploit-db.com/exploits/14186
- http://www.securityfocus.com/bid/41346
- http://www.vupen.com/english/advisories/2010/1687
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60057