CVE-2008-5887: Input Validation
Published Jan 12, 2009
·Updated
phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability."
Affected Software
69 affected components
Tincan Phplist=2.4.0
Tincan Phplist=2.5.6
Tincan Phplist=2.10.6
Tincan Phplist=2.10.3
Tincan Phplist=1.6.1
Tincan Phplist=2.8.2
Tincan Phplist=1.9.0
Tincan Phplist=2.5.5
Tincan Phplist=1.6.0
Tincan Phplist=1.9.3
Tincan Phplist=1.6.3
Tincan Phplist=2.6.3
Tincan Phplist=2.1.0
Tincan Phplist=2.9.4
Tincan Phplist=2.3.1
Tincan Phplist=2.6.5
Tincan Phplist<=2.10.7
Tincan Phplist=2.9.3
Tincan Phplist=1.6.4
Tincan Phplist=2.6
Tincan Phplist=2.1.4
Tincan Phplist=2.5.7
Tincan Phplist=2.6.0
Tincan Phplist=1.5.1
Tincan Phplist=1.9.2
Tincan Phplist=2.8.12
Tincan Phplist=2.6.2
Tincan Phplist=2.5.4
Tincan Phplist=1.1.5b
Tincan Phplist=2.10.5
Tincan Phplist=1.4.1
Tincan Phplist=2.1.1
Tincan Phplist=2.4.7
Tincan Phplist=1.1.6
Tincan Phplist=1.8.0
Tincan Phplist=1.7.0
Tincan Phplist=1.7.1
Tincan Phplist=2.1.3
Tincan Phplist=1.1.4b
Tincan Phplist=1.1.5
Tincan Phplist=2.10.2
Tincan Phplist=2.5.2
Tincan Phplist=2.9.5
Tincan Phplist=2.5.0
Tincan Phplist=1.3.5
Tincan Phplist=2.3.2
Tincan Phplist=2.5.8
Tincan Phplist=2.2.0
Tincan Phplist=2.3.0
Tincan Phplist=1.0
Tincan Phplist=1.5.0
Tincan Phplist=1.1.2b
Tincan Phplist=1.9.1
Tincan Phplist=2.5.1
Tincan Phplist=2.6.4
Tincan Phplist=2.3.4
Tincan Phplist=1.0.1
Tincan Phplist=1.1.7
Tincan Phplist=2.10.4
Tincan Phplist=2.8.7
Tincan Phplist=2.10.1
Tincan Phplist=1.1.3b
Tincan Phplist=2.3.3
Tincan Phplist=2.6.1
Tincan Phplist=1.3.7
Tincan Phplist=2.2.1
Tincan Phplist=2.5.3
Tincan Phplist=2.7.1
Tincan Phplist=2.7.2
Event History
Jan 12, 2009
CVE Published
via MITRE·07:27 PM
Data Sourced
via MITRE·07:27 PM
Description
Data Sourced
via NVD·08:00 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5887?
CVE-2008-5887 is classified as a high severity vulnerability due to the potential for remote file inclusion attacks.
2
How do I mitigate CVE-2008-5887?
To mitigate CVE-2008-5887, upgrade PHPList to version 2.10.8 or later, which addresses the vulnerability.
3
What versions of PHPList are affected by CVE-2008-5887?
CVE-2008-5887 affects PHPList versions prior to 2.10.8.
4
Can CVE-2008-5887 lead to server compromise?
Yes, CVE-2008-5887 can lead to server compromise if an attacker successfully exploits the local file inclusion vulnerability.
5
Is there a patch available for CVE-2008-5887?
Yes, a patch is available by upgrading to PHPList version 2.10.8 or later.