CVE-2008-5844: PHP

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

PHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and unintentionally disables magic_quotes_gpc regardless of the actual magic_quotes_gpc setting, which might make it easier for context-dependent attackers to conduct SQL injection attacks and unspecified other attacks.

Affected products

• PHP PHP: version 5.2.7 only

Published 2009-01-05. Last modified 2026-06-16.