CVE-2008-5694

Name of the Vulnerable Software and Affected Versions Sandbox version 1.4.1

Description A remote file inclusion issue in lib/jpgraph/jpgraph errhandler.inc.php might allow remote attackers to execute arbitrary PHP code. The issue may be located in Aditus JpGraph rather than Sandbox.

Recommendations For version 1.4.1, consider restricting access to the lib/jpgraph/jpgraph errhandler.inc.php file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.