123_flash_chat_module Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/123_flash_chat_module/ Sun, 26 Feb 2023 09:08:53 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png 123_flash_chat_module Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/123_flash_chat_module/ 32 32 CVE-2008-1171 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-1171/ Sun, 26 Feb 2023 09:08:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-1171/ ** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) 123flashchat.php and (2) phpbb_login_chat.php. NOTE: CVE disputes this issue because $phpbb_root_path is explicitly set to “./” in both programs.

The post CVE-2008-1171 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) 123flashchat.php and (2) phpbb_login_chat.php. NOTE: CVE disputes this issue because $phpbb_root_path is explicitly set to “./” in both programs.

The post CVE-2008-1171 appeared first on CVE Vulnerability.

]]>