CVE:CVE-2008-1989
CNNVD:CNNVD-200804-403
e107 123 Flash Chat 6.8.0模块的123flashchat.php中存在PHP远程文件包含漏洞,当register_globals被激活的时候,远程攻击者通过e107path参数执行任意PHP代码。
solution:Upgrade 123flashchat 123_flash_chat_module to a higher version than 6.8.0,and avoid the version 6.8.0; Upgrade e107 e107 to a higher version than *
solution:Upgrade myknowledgequest knowledgequest to a higher version than 2.5,2.6,and avoid the version 2.5,2.6