📦

123_flash_chat_module

Vendor: phpbb

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 2 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 2.35% Exploit Prob.
Latest CVE CVE-2008-1989 Apr 27

Security Vulnerability Index

Page 1 / 1
10.0 CVSS
CVE-2008-1989
RCE Exploit Found

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter.

EPSS: 3.57%
6.8 CVSS
CVE-2008-1171
RCE

Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) 123flashchat.php and (2) phpbb_login_chat.php. NOTE: CVE disputes this issue because $phpbb_root_path is explicitly set to "./" in both programs

EPSS: 1.13%