CVE-2008-1989

CVE-2008-1989 : PHP remote file inclusion in the 123 Flash Chat 6.8.0 module for e107 (123flashchat.php) allows remote code execution when register_globals is enabled. Exploitation occurs via a URL in the e107path parameter, enabling arbitrary PHP execution. The vulnerability is classified with a...

e107chat-rfi.txt

E107 Chat Module 123FlashChat Remote File Inclusion Vulnerability AUTHOR : bycasper41 Mekan : Cyber-Warrior.Org MAİL : [email protected] Download: http://www.123flashchat.com/download/e107modfor123flashchat6.8.0.zip DORKS : "123flashchat.php" EXPLOITS :...