Description
PHP remote file inclusion vulnerability in adminips.php in Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via a URL in the banned_file parameter. NOTE: CVE disputes this vulnerability because banned_file is set to a constant value
References
- 20060616 Develooping Flash Chat (banned_file) Remote File Inclusion mailing-list
- dfc-adminips-file-include(27233) vdb-entry
- 20070214 false: old Develooping Flash Chat RFI mailing-list
- 18480 vdb-entry