CVE-2008-5673: Phparanoid

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vectors.

Affected products

• Phparanoid Phparanoid: up to and including 0.3; version 0.1 only; version 0.2 only

Published 2008-12-19. Last modified 2026-06-16.