NVD

Id
1131  
Name
CVE-2008-1171  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) 123flashchat.php and (2) phpbb_login_chat.php. NOTE: CVE disputes this issue because $phpbb_root_path is explicitly set to "./" in both programs.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-03-05  
Modified Date
2008-09-05  
Seq
2008-1171  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
6944 1131 CVE-2008-1171 3716  View
6945 1131 CVE-2008-1171 20080305 false: 123 Flash Chat RFI  View
6946 1131 CVE-2008-1171 20080228 123 Flash Chat Module for phpBB  View
6947 1131 CVE-2008-1171 20080228 Re: 123 Flash Chat Module for phpBB  View

Related JVN