EUVD-2008-1987

Malware in sbrugna...

CVE-2008-1989: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter...