Threat Encyclopedia
FlashChat.Multiple.Remote.File.Inclusion
Description
FlashChat has a multiple remote file-include vulnerability. A remote attacker could execute arbitrary code on the Web server by sending a specially crafted URL request to the aedating4CMS.php, aedatingCMS2.php, or aedatingCMS.php script, using the dir[inc] parameter to specify a malicious file from a remote system.
Affected Products
FlashChat versions prior to 4.6.2
Impact
Gain Access
Recommended Actions
Update the software to last version