Every CVE Search/ Get API key

CVE-2008-1506

PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a...

5.0 MediumPublic exploit

PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

Exploit likelihood

2.44%Up 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

Record
CVE-2008-1506
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

Record
CVE-2008-1506
Updated
2026-11-02
EUVDEUVD-2008-1507 No score

PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

Record
EUVD-2008-1507
Updated
2026-11-03
GitHub AdvisoriesGHSA-vmjp-7grp-j482 No score

PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a...

PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

Record
GHSA-vmjp-7grp-j482
Weakness
CWE-200
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload2008-03-19

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-1506 is a medium vulnerability (CVSS 5.0) in Peel, published March 25, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.44%, the 84th percentile. No source names a fixed version.

References

MoveEnter Open