connection.php in FlashChat 5.0.8 allows remote malicious users to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to "7."
source: wwwsecurityfocuscom/bid/31800/info
FlashChat is prone to a security-bypass vulnerability
An attacker can leverage this vulnerability to bypass certain security restrictions and gain unauthorized administrative access to the affected application
sendAndLoad=%5Btype%20Function%5D&s=7&t=&r=0&u=5581&b=3&c= ...
Vulmon