CVE-2008-5840

HIGH 7.5CVE-2008-5840 · Published 05/01/2009 · updated 16/06/2026

In short

CVE-2008-5840 is a HIGH (CVSS 7.5) vulnerability affecting phpicalendar (phpicalendar), phpicalendar2.0 (phpicalendar).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpicalendar phpicalendar	`= 0.7= 0.8= 0.9= 0.9.5= 1.0= 1.1= 2.0= 2.0.1= 2.0c= 2.1= 2.2= 2.21= 2.22= 2.23≤ 2.24`	No fix yet
phpicalendar2.0 phpicalendar	`= alpha_test`	No fix yet

PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendar_login cookies to 1.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.