CVEvulnerability
CVE-2008-5887
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-01-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability."
Affected configurations
• tincan phplist (<= 2.10.7)
• tincan phplist 1.0
• tincan phplist 1.0.1
• tincan phplist 1.1.2b
• tincan phplist 1.1.3b
• tincan phplist 1.1.4b
• tincan phplist 1.1.5
• tincan phplist 1.1.5b
• tincan phplist 1.1.6
• tincan phplist 1.1.7
• tincan phplist 1.3.5
• tincan phplist 1.3.7
• tincan phplist 1.4.1
• tincan phplist 1.5.0
• tincan phplist 1.5.1
• tincan phplist 1.6.0
• tincan phplist 1.6.1
• tincan phplist 1.6.3
• tincan phplist 1.6.4
• tincan phplist 1.7.0
• tincan phplist 1.7.1
• tincan phplist 1.8.0
• tincan phplist 1.9.0
• tincan phplist 1.9.1
• tincan phplist 1.9.2
• tincan phplist 1.9.3
• tincan phplist 2.1.0
• tincan phplist 2.1.1
• tincan phplist 2.1.3
• tincan phplist 2.1.4
• tincan phplist 2.2.0
• tincan phplist 2.2.1
• tincan phplist 2.3.0
• tincan phplist 2.3.1
• tincan phplist 2.3.2
• tincan phplist 2.3.3
• tincan phplist 2.3.4
• tincan phplist 2.4.0
• tincan phplist 2.4.7
• tincan phplist 2.5.0
• tincan phplist 2.5.1
• tincan phplist 2.5.2
• tincan phplist 2.5.3
• tincan phplist 2.5.4
• tincan phplist 2.5.5
• tincan phplist 2.5.6
• tincan phplist 2.5.7
• tincan phplist 2.5.8
• tincan phplist 2.6
• tincan phplist 2.6.0
• tincan phplist 2.6.1
• tincan phplist 2.6.2
• tincan phplist 2.6.3
• tincan phplist 2.6.4
• tincan phplist 2.6.5
• tincan phplist 2.7.1
• tincan phplist 2.7.2
• tincan phplist 2.8.2
• tincan phplist 2.8.7
• tincan phplist 2.8.12
… and 9 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/33186 Vendor Advisory
- http://securityreason.com/securityalert/4901 securityreason.com
- http://www.phplist.com/?lid=273 Vendor Advisory
- http://www.securityfocus.com/archive/1/499218/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32841 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47395 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/33186 Vendor Advisory
- http://securityreason.com/securityalert/4901 securityreason.com
- http://www.phplist.com/?lid=273 Vendor Advisory
- http://www.securityfocus.com/archive/1/499218/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32841 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47395 exchange.xforce.ibmcloud.com