CVE-2008-4319: fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers t...

Security readout for executives and security teams

CVE-2008-4319 is an authentication bypass in Libra File Manager 1.18 and earlier. A remote attacker could access file management functions without a valid login, creating business risk from exposed files, altered site content, or directory disclosure on legacy PHP sites. Exposure is most likely on old PHP web applications still running Libra File Manager 1.18 or earlier with fileadmin.php reachable from untrusted networks. The bundle does not identify broader affected products or maintained package names. Treat this as high priority if the software is internet-facing or protects sensitive files. The product appears old, and the described impact includes unauthorized file reads and modification, which can affect confidentiality, integrity, and public website trust. Mitigation focus: Inventory sites for Libra File Manager and fileadmin.php.; Remove or disable Libra File Manager if it is not required.; Restrict access to fileadmin.php to trusted admin networks..

Prepared

Jun 28, 2026, 11:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.