CyberSec.Space Logo
Back to CVE Browser

CVE-2008-1989

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1780%
EPSS Percentile38.18th
PublishedApr 27, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter.

Affected Platforms (CPE)

📦
123flashchat

123 Flash Chat Module

= 6.8.0
📦
E107

E107

All versions

References & Advisories

🔗 http://secunia.com/advisories/29870
🔗 http://www.securityfocus.com/bid/28828
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/41867
🔗 https://www.exploit-db.com/exploits/5459
🔗 http://secunia.com/advisories/29870
🔗 http://www.securityfocus.com/bid/28828
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/41867
🔗 https://www.exploit-db.com/exploits/5459

Related Vulnerabilities

CVE-2008-11716.8

Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitr...

CVE-2008-166810.0

ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfig...

CVE-2008-365310.0

Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before 2.0 have unknown impact and attack vectors.

CVE-2008-333810.0

Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk bef...