Approved changes feed: RSS · Atom

cpe:2.3:a:phpbb:123_flash_chat_module:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhpbb (3b8545c5-ebe8-5695-b55a-b077792aa8a9)
Product123 Flash Chat Module (59625895-1204-543d-a0e8-a9c97076851d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1171 vulnerable 2026-06-03 14:28:39.613091 Details available
Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) 123flashchat.php and (2) phpbb_login_chat.php. NOTE: CVE disputes this issue because $phpbb_root_path is explicitly set to "./" in both programs
Published: 2008-03-05T23:00:00.000Z
Updated: 2024-08-07T08:08:57.613Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.