CVE-2008-6313: Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magic_quotes_gpc is disable...

Security readout for executives and security teams

CVE-2008-6313 is an old phpAddEdit 1.3 web application flaw that can let a remote attacker make the server include files it should not. If exploited, this may lead to code execution in the web server context. Evidence shows a public exploit reference, but no KEV listing or confirmed active exploitation in the provided sources. Exposure is most likely on legacy PHP sites that still run phpAddEdit 1.3 and expose addedit-render.php to untrusted users. The bundle does not identify other affected products or supported version ranges. Treat this as urgent for any internet-facing legacy PHP environment. The component is old, public exploit material is referenced, and successful exploitation could affect server-side execution. Priority is lower only if phpAddEdit is absent or not reachable. Mitigation focus: Inventory systems for phpAddEdit 1.3 and exposed addedit-render.php files.; Remove or disable phpAddEdit if it is unused or unsupported.; Check vendor or project guidance for any available fixed release..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.