• info
• discussion
• exploit
• solution
• references

MPM Chat View.PHP Local File Include Vulnerability

MPM Chat is prone to a local file-include vulnerability because the application fails to sanitize user-supplied input.

A successful exploit would allow an attacker to view files and execute arbitrary local scripts within the context of the webserver.

This issue affects version 2.5; other versions may also be affected.