CVE-2014-8998

CVE-2014-8998 affects X7 Chat, specifically vulnerable in lib/message.php across versions 2.0.0–2.0.5.1. The issue allows a remote authenticated user to execute arbitrary PHP code by sending a crafted HTTP header to index.php, where the header is processed by preg_replace with the /e modifier. Th...