VULNERABILITY INTELLIGENCE
CVE-2008-5844
CVSS score7.5 HIGH
EPSS probability1.66%
CISA KEVNot currently listed
Published2009-01-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
PHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and unintentionally disables magic_quotes_gpc regardless of the actual magic_quotes_gpc setting, which might make it easier for context-dependent attackers to conduct SQL injection attacks and unspecified other attacks.