CVEブラウザに戻る

CVE-2008-1989

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1780%

EPSS Percentile38.18th

Published2008年4月27日

Last Modified2026年4月23日

Vulnerability Description

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter.

Affected Platforms (CPE)

📦

123flashchat

123 Flash Chat Module

= 6.8.0

📦

E107

E107

All versions

References & Advisories

🔗 http://secunia.com/advisories/29870

🔗 http://www.securityfocus.com/bid/28828

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/41867

🔗 https://www.exploit-db.com/exploits/5459

🔗 http://secunia.com/advisories/29870

🔗 http://www.securityfocus.com/bid/28828

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/41867

🔗 https://www.exploit-db.com/exploits/5459

関連する脆弱性情報

CVE-2008-11716.8

Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitr...

CVE-2008-034310.0

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has u...

CVE-2008-665110.0

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP c...

CVE-2008-034610.0

Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 ...