Search for vulnerabilities
Vulnerability details: VCID-vbz8-qmzg-dfac
Vulnerability ID VCID-vbz8-qmzg-dfac
Aliases CVE-2008-5619
GHSA-v5c9-mmw9-829q
Summary
Status Published
Exploitability 2.0
Weighted Severity 8.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-94 Improper Control of Generation of Code ('Code Injection')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual HIGH http://mahara.org/interaction/forum/topic.php?id=533
generic_textual HIGH http://osvdb.org/53893
epss 0.77735 https://api.first.org/data/v1/epss?cve=CVE-2008-5619
epss 0.77735 https://api.first.org/data/v1/epss?cve=CVE-2008-5619
epss 0.77735 https://api.first.org/data/v1/epss?cve=CVE-2008-5619
epss 0.77735 https://api.first.org/data/v1/epss?cve=CVE-2008-5619
epss 0.77735 https://api.first.org/data/v1/epss?cve=CVE-2008-5619
epss 0.77735 https://api.first.org/data/v1/epss?cve=CVE-2008-5619
epss 0.77735 https://api.first.org/data/v1/epss?cve=CVE-2008-5619
epss 0.77735 https://api.first.org/data/v1/epss?cve=CVE-2008-5619
epss 0.77735 https://api.first.org/data/v1/epss?cve=CVE-2008-5619
epss 0.77735 https://api.first.org/data/v1/epss?cve=CVE-2008-5619
epss 0.77735 https://api.first.org/data/v1/epss?cve=CVE-2008-5619
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-v5c9-mmw9-829q
generic_textual HIGH https://github.com/PHPMailer/PHPMailer
generic_textual HIGH https://github.com/PHPMailer/PHPMailer/commit/8beacc646acb67c995aea10ac5585970efc7355a
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2008-5619
generic_textual HIGH http://sourceforge.net/forum/forum.php?forum_id=898542
generic_textual HIGH https://www.exploit-db.com/exploits/7549
generic_textual HIGH https://www.exploit-db.com/exploits/7553
generic_textual HIGH https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00783.html
generic_textual HIGH https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00802.html
generic_textual HIGH http://trac.roundcube.net/changeset/2148
generic_textual HIGH http://trac.roundcube.net/ticket/1485618
generic_textual HIGH http://www.openwall.com/lists/oss-security/2008/12/12/1
Reference id Reference type URL
http://mahara.org/interaction/forum/topic.php?id=533
http://osvdb.org/53893
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5619.json
https://api.first.org/data/v1/epss?cve=CVE-2008-5619
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5619
https://github.com/PHPMailer/PHPMailer
https://github.com/PHPMailer/PHPMailer/commit/8beacc646acb67c995aea10ac5585970efc7355a
https://nvd.nist.gov/vuln/detail/CVE-2008-5619
http://sourceforge.net/forum/forum.php?forum_id=898542
https://www.exploit-db.com/exploits/7549
https://www.exploit-db.com/exploits/7553
https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00783.html
https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00802.html
http://trac.roundcube.net/changeset/2148
http://trac.roundcube.net/ticket/1485618
http://www.openwall.com/lists/oss-security/2008/12/12/1
476223 https://bugzilla.redhat.com/show_bug.cgi?id=476223
508628 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508628
CVE-2008-5619 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/7549.txt
CVE-2008-5619 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/7553.sh
GHSA-v5c9-mmw9-829q https://github.com/advisories/GHSA-v5c9-mmw9-829q
USN-791-1 https://usn.ubuntu.com/791-1/
Data source Exploit-DB
Date added Dec. 21, 2008
Description Roundcube Webmail 0.2b - Remote Code Execution
Ransomware campaign use Known
Source publication date Dec. 22, 2008
Exploit type webapps
Platform php
Source update date April 27, 2011
Exploit Prediction Scoring System (EPSS)
Percentile 0.98945
EPSS Score 0.77735
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:38:52.249152+00:00 Ubuntu USN Importer Import https://usn.ubuntu.com/791-1/ 37.0.0