CVE-2008-5887: Tincan Phplist

Medium severity, CVSS 5.0. EPSS: 11.3% chance of exploitation in the next 30 days.

phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability."

Affected products

• Tincan Phplist: up to and including 2.10.7; version 1.0 only; version 1.0.1 only; version 1.1.2b only; version 1.1.3b only; version 1.1.4b only; …

Published 2009-01-12. Last modified 2026-06-16.