CVE-2008-5587

Severity CVSS v4.0:
Pending analysis
Type:
CWE-22 Path Traversal
Publication date:
16/12/2008
Last modified:
09/04/2025

Description

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the _language parameter to index.php.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:* 4.2.1 (including)
cpe:2.3:a:phppgadmin:phppgadmin:2.2:*:*:*:*:*:*:*
cpe:2.3:a:phppgadmin:phppgadmin:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:phppgadmin:phppgadmin:3.1:*:*:*:*:*:*:*
cpe:2.3:a:phppgadmin:phppgadmin:3.4.1:*:*:*:*:*:*:*
cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
cpe:2.3:a:phppgadmin:phppgadmin:3.5.2:*:*:*:*:*:*:*
cpe:2.3:a:phppgadmin:phppgadmin:3.5.3:*:*:*:*:*:*:*
cpe:2.3:a:phppgadmin:phppgadmin:4.1.1:*:*:*:*:*:*:*