CVE-2008-5771: Phpweather

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.

Affected products

• Phpweather Phpweather: version 2.2.2 only

Published 2008-12-30. Last modified 2026-06-16.