Description
PHP remote file inclusion vulnerability in start_lobby.php in MWChat 6.x allows remote attackers to execute arbitrary PHP code via the CONFIG[MWCHAT_Libs] parameter.
References
- http://www.defacers.com.mx/advisories/4.txt
- 17087 vdb-entry
- 1014090 vdb-entry
- http://www.appindex.net
- 15596 third-party-advisory