← Database

CVE-2008-5844

HIGH CVSS: 7.5 Published: 2009-01-05 Modified: 2026-06-16

Description

PHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and unintentionally disables magic_quotes_gpc regardless of the actual magic_quotes_gpc setting, which might make it easier for context-dependent attackers to conduct SQL injection attacks and unspecified other attacks.

Affected Platforms

Php Php

Weakness Type

CWE-16

References