CVE-2008-5587: Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_g...

Security readout for executives and security teams

CVE-2008-5587 affects old phpPgAdmin installations. If a vulnerable version is exposed and PHP register_globals is enabled, a remote attacker may read files from the server. This matters because phpPgAdmin often sits near database administration workflows, where configuration files and credentials may be sensitive. Exposure is most likely on legacy phpPgAdmin 4.2.1 or earlier deployments, especially internet-facing admin panels using old PHP configurations with register_globals enabled. Modern or patched deployments are less likely affected, but old distribution packages should be verified. Treat this as a legacy exposure cleanup item with high priority where phpPgAdmin is internet-facing or near sensitive database systems. Absence from KEV lowers urgency, but public exploit availability and arbitrary file read impact justify prompt verification. Mitigation focus: Upgrade phpPgAdmin using vendor security guidance or supported distribution packages.; Disable register_globals if it is still enabled in the PHP environment.; Restrict phpPgAdmin access to trusted networks or authenticated administrative paths..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.