Description
PHP remote file inclusion vulnerability in connected_users.lib.php3 in phpHeaven phpMyChat 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter.
References
- http://www.nyubicrew.org/adv/solpot-adv-09.txt
- 20219 vdb-entry
- 20060926 SolpotCrew Advisory #13 - phpMyChat 0.1 (ChatPath) Remote File Inclusion mailing-list
- 1654 third-party-advisory
- phpmychat-connected-file-include(29180) vdb-entry