← Database

CVE-2008-1989

CRITICAL CVSS: 10.0 Published: 2008-04-27 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter.

Affected Platforms

123Flashchat 123 Flash Chat ModuleE107 E107

Weakness Type

CWE-94

References