CVE-2008-3031: Simple PHP Agenda

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in Simple PHP Agenda 2.2.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.

Affected products

• Simple PHP Agenda Simple PHP Agenda: up to and including 2.2.4; version 2.0.0 only; version 2.1.0 only; version 2.2.0 only; version 2.2.1 only; version 2.2.2 only; …

Published 2008-07-07. Last modified 2026-06-16.