CVE-2008-5792: PHP remote file inclusion vulnerability in show_joined.php in Indiscripts Enthusiast 3.1.4, and possibly ea...

Security readout for executives and security teams

This is an old PHP remote file inclusion issue in Indiscripts Enthusiast. If a public site runs the affected show_joined.php code, an attacker may be able to make the server run attacker-controlled PHP. That is a serious server-compromise scenario, but the bundle does not show active exploitation or a confirmed vendor patch. Exposure is likely limited to legacy PHP websites still running Indiscripts Enthusiast 3.1.4 or possibly earlier. Internet-facing deployments are the primary concern. The bundle lists affected vendor and product fields as n/a, so asset owners must verify installations by software name and file presence. Prioritize remediation if any public website still runs this software. The business risk is full web-server compromise, but the likely footprint is legacy and narrow. If no Enthusiast deployment exists, record the CVE as not applicable. Mitigation focus: Identify and remove unsupported Indiscripts Enthusiast deployments.; Check vendor or project guidance for a fixed release or workaround.; Restrict public access to affected Enthusiast paths until resolved..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.