CVE catalog

CVE-2008-5587

DEBIAN-CVE-2008-5587

Severity: Unknown
Published: Dec 16, 2008, 7:07:31 PM UTC
Updated: Sep 20, 2026, 6:47:37 AM UTC
Source: [NVD] · [CVE record]
EPSS: 12.86% · Oct 25, 2026

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the _language parameter to index.php.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	phppgadmin	13	`4.2.1-1.1`	fixed
Debian	phppgadmin	14	`4.2.1-1.1`	fixed
Opensuse	phpPgAdmin	tumbleweed	`5.1-5.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	phppgadmin	deb	13	`4.2.1-1.1`	Not reported	DEBIAN-CVE-2008-5587	Not reported
Debian	phppgadmin	deb	14	`4.2.1-1.1`	Not reported	DEBIAN-CVE-2008-5587	Not reported
Opensuse	phpPgAdmin	rpm	tumbleweed	`5.1-5.1`	Not reported	OPENSUSE-SU-2024:10035-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[phpPgAdmin-apache]Unknown
Source package: [phpPgAdmin]
Details (1)
- 7.14.7-1.3 · noarch · tumbleweed
  Unknown · Fixed: 5.1-5.1
  Version impact unknown
  pypi · phpPgAdmin · opensuse · tumbleweed
[phpPgAdmin]Fixed
Source package: [phpPgAdmin]
Details (1)
- 7.14.7-1.3 · noarch · tumbleweed
  Fixed · Fixed: 5.1-5.1
  pypi · phpPgAdmin · opensuse · tumbleweed

[Debian 13 (Trixie)]

[phppgadmin]Fixed
Details (2)
- 7.14.7+dfsg-1 · all · trixie
  Fixed · Fixed: 4.2.1-1.1
  pypi · phppgadmin · debian · 13
- 7.14.7+dfsg-1 · all · trixie
  Fixed · Fixed: 4.2.1-1.1
  pypi · phppgadmin · debian · 13

Observed: Oct 23, 2026, 5:04:25 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]