CVE-2008-5587: Path Traversal
Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when registerglobals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the language parameter to index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5587?
CVE-2008-5587 is classified as a high severity vulnerability due to its ability to allow remote file reading by attackers.
How do I fix CVE-2008-5587?
To fix CVE-2008-5587, disable register_globals in your PHP configuration and upgrade to a later version of phpPgAdmin.
Which versions of phpPgAdmin are affected by CVE-2008-5587?
CVE-2008-5587 affects phpPgAdmin versions 4.2.1 and earlier, as well as specific older versions.
What type of attack does CVE-2008-5587 facilitate?
CVE-2008-5587 facilitates directory traversal attacks that expose sensitive files to remote attackers.
Can CVE-2008-5587 lead to data breaches?
Yes, CVE-2008-5587 can potentially lead to data breaches by allowing unauthorized reading of system files.