CVE-2008-5789: Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com_feederator) com...

Security readout for executives and security teams

This is an old Joomla component flaw that could let a remote attacker make the site run attacker-controlled PHP. The business risk is full website compromise where the vulnerable Recly Interactive Feederator component 1.0.5 is still installed and reachable. Exposure is likely limited to legacy Joomla sites that still have Recly Interactive Feederator com_feederator 1.0.5 installed. The provided affected metadata is incomplete, so validate from Joomla extension inventory rather than CPE matching. Treat as urgent if the component is present on an internet-facing Joomla site. The flaw can lead to server-side code execution, but current exploitation evidence is not established in the provided sources. Mitigation focus: Check vendor or project guidance for any fixed release or removal recommendation.; Disable or remove com_feederator if it is not business-critical.; Restrict public access to affected component paths until remediated..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.