Evil-DB LogoEvil-DB
← All CVEs

CVE-2008-5887

medium · 5

phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability."

5
CVSS
11.3%
EPSS (exploit prob.)
96th
EPSS percentile
2009-01-12
Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
tincanphplist<= 2.10.7
tincanphplist1.0
tincanphplist1.0.1
tincanphplist1.1.2b
tincanphplist1.1.3b
tincanphplist1.1.4b
tincanphplist1.1.5
tincanphplist1.1.5b
tincanphplist1.1.6
tincanphplist1.1.7
tincanphplist1.3.5
tincanphplist1.3.7
tincanphplist1.4.1
tincanphplist1.5.0
tincanphplist1.5.1
tincanphplist1.6.0
tincanphplist1.6.1
tincanphplist1.6.3
tincanphplist1.6.4
tincanphplist1.7.0
tincanphplist1.7.1
tincanphplist1.8.0
tincanphplist1.9.0
tincanphplist1.9.1
tincanphplist1.9.2
tincanphplist1.9.3
tincanphplist2.1.0
tincanphplist2.1.1
tincanphplist2.1.3
tincanphplist2.1.4
tincanphplist2.2.0
tincanphplist2.2.1
tincanphplist2.3.0
tincanphplist2.3.1
tincanphplist2.3.2
tincanphplist2.3.3
tincanphplist2.3.4
tincanphplist2.4.0
tincanphplist2.4.7
tincanphplist2.5.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-5887