CVE-2008-4319

no score yetEPSS 2.3%

fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2008-09-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

libra_file_manager:php_filemanager

References

http://www.securityfocus.com/archive/1/496742
http://www.securityfocus.com/bid/31415
https://exchange.xforce.ibmcloud.com/vulnerabilities/45423
https://www.exploit-db.com/exploits/6567
http://www.securityfocus.com/archive/1/496742

Check your stack JSON