CVE-2008-5587

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-12-16 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the _language parameter to index.php.

Affected products

Phppgadmin: through 4.2.1; 2.2, 2.2.1, 3.1, 3.4.1, 3.5, 3.5.2 (+2)

References

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html
http://secunia.com/advisories/33014
http://secunia.com/advisories/33263
http://securityreason.com/securityalert/4737
http://www.debian.org/security/2008/dsa-1693
http://www.securityfocus.com/bid/32670
https://exchange.xforce.ibmcloud.com/vulnerabilities/47140
https://www.exploit-db.com/exploits/7363
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html
http://secunia.com/advisories/33014

Get alerted when CVE-2008-5587 or the next vulnerability affects your stack