📦

123_flash_chat_module

Vendor: 123flashchat

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 1 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 3.57% Exploit Prob.
Latest CVE CVE-2008-1989 Apr 27

Security Vulnerability Index

Page 1 / 1
10.0 CVSS
CVE-2008-1989
RCE Exploit Found

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter.

EPSS: 3.57%