CVE-2008-1171: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 123flashchat.php and 2 phpbbloginchat.php. NOTE: CVE disputes this issue because $phpbbrootpath is explicitl...