CVE-2008-1989

no score yetEPSS 3.5%

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter.

EPSS: 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2008-04-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

123flashchat:123_flash_chat_module
e107:e107

References

http://secunia.com/advisories/29870
http://www.securityfocus.com/bid/28828
https://exchange.xforce.ibmcloud.com/vulnerabilities/41867
https://www.exploit-db.com/exploits/5459
http://secunia.com/advisories/29870

Check your stack JSON