CVE-2010-4988

CVE-2010-4988 describes a PHP remote file inclusion vulnerability in Family Connections Who is Chatting 2.2.3, specifically in mod_chatting/themes/default/header.php where TMPL[path] can be controlled to include remote PHP code. The underlying issue enables an attacker to execute arbitrary PHP vi...