CVE-2008-5694: Sandbox

High severity, CVSS 10.0. EPSS: 2.2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treated as an issue in Sandbox.

Affected products

• Sandbox Sandbox: version 1.4.1 only

Published 2008-12-19. Last modified 2026-06-16.