Unscored severity · published Dec 19, 2008
CVE-2008-5694
PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified…
–
CVSS
2.2%
EPSS
No
On KEV
Description
PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treated as an issue in Sandbox.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Sandbox · Sandbox
1.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5694
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5694
URL Repurposed
http://www.by-f10.com/bug.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/487903/100/200/threaded
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/47688
More from Sandbox
–
CVE-2005-2449
Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp