CVE-2008-5947: PHP remote file inclusion vulnerability in include/class_yapbbcooker.php in YapBB 1.2.Beta 2 allows remote...

Security readout for executives and security teams

This is an old remote file inclusion issue in YapBB 1.2.Beta 2. If a vulnerable instance is reachable, an attacker could make the application load and run PHP code from a remote location, potentially taking over the web application. Exposure is likely limited to legacy YapBB 1.2.Beta 2 deployments, especially public PHP installations. The provided affected metadata is marked n/a, so asset owners should confirm by product inventory and file presence rather than relying on CPE matching. Treat as a high-priority legacy exposure issue if YapBB is present. The business urgency comes from potential remote code execution, but remediation scope is likely narrow because the product and version are old and specific. Mitigation focus: Identify and retire any YapBB 1.2.Beta 2 installations.; Check vendor or maintainer guidance for an official fixed version.; Remove public access to vulnerable legacy instances until remediated..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.