{"id": "CVE-2008-5056", "bulletinFamily": "NVD", "title": "CVE-2008-5056", "description": "Cross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the department_id parameter to index.php.", "published": "2008-11-13T11:30:00", "modified": "2017-08-08T01:33:00", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5056", "reporter": "cve@mitre.org", "references": ["http://osvdb.org/49858", "https://exchange.xforce.ibmcloud.com/vulnerabilities/46560", "http://www.securityfocus.com/bid/32268", "http://holisticinfosec.org/content/view/93/45/", "http://activecampaign.com/support/forum/showthread.php?t=4554"], "cvelist": ["CVE-2008-5056"], "type": "cve", "lastseen": "2019-05-29T18:09:29", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "d69c7597e6991f89f0028d67f6fc3a7e"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "ab4176e53f4a87214ddbbe77bb5c579f"}, {"key": "cpe23", "hash": "5b5e92f7d649aad78693cc42288825e2"}, {"key": "cvelist", "hash": "4a8588e2f035a36c87dbedcde91dadf1"}, {"key": "cvss", "hash": "f74a1c24e49a5ecb0eefb5e51d4caa14"}, {"key": "cvss2", "hash": "25131d66a9f3961140b068f4b41aa42b"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "34e69e045b64924bccf865d56b6918a2"}, {"key": "description", "hash": "486e6a7ef8c725a9c2d6e4e7435be08e"}, {"key": "href", "hash": "c0df9b1d86b4c481e13e2f10355befe8"}, {"key": "modified", "hash": "8004a81951076f215123ecae93154cff"}, {"key": "published", "hash": "9f61bef24257466076f3b1abbe3374e3"}, {"key": "references", "hash": "4a09d980e71eb92108e9324c3f0325e7"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "66d120cfdfbaf0de47f912e12e0c4428"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "846dfac10d4796b035ebcaaae10ff17b7ef45fc30390dbbd8dc2904008924e79", "viewCount": 0, "enchantments": {"score": {"value": 4.4, "vector": "NONE", "modified": "2019-05-29T18:09:29"}, "dependencies": {"references": [], "modified": "2019-05-29T18:09:29"}, "vulnersScore": 4.4}, "objectVersion": "1.3", "cpe": ["cpe:/a:activecampaign:triolive:1.50.3", "cpe:/a:activecampaign:triolive:1.32", "cpe:/a:activecampaign:triolive:1.08", "cpe:/a:activecampaign:triolive:1.07", "cpe:/a:activecampaign:triolive:1.56.4", "cpe:/a:activecampaign:triolive:1.29", "cpe:/a:activecampaign:triolive:1.58.2", "cpe:/a:activecampaign:triolive:1.58.4", "cpe:/a:activecampaign:triolive:1.50.5", "cpe:/a:activecampaign:triolive:1.50.4", "cpe:/a:activecampaign:triolive:1.50.2", "cpe:/a:activecampaign:triolive:1.36", "cpe:/a:activecampaign:triolive:1.24", "cpe:/a:activecampaign:triolive:1.41", "cpe:/a:activecampaign:triolive:1.23", "cpe:/a:activecampaign:triolive:1.58.1", "cpe:/a:activecampaign:triolive:1.56.3", "cpe:/a:activecampaign:triolive:1.11", "cpe:/a:activecampaign:triolive:1.55.0", "cpe:/a:activecampaign:triolive:1.10", "cpe:/a:activecampaign:triolive:1.19", "cpe:/a:activecampaign:triolive:1.42", "cpe:/a:activecampaign:triolive:1.34", "cpe:/a:activecampaign:triolive:1.55.1", "cpe:/a:activecampaign:triolive:1.06", "cpe:/a:activecampaign:triolive:1.56.2", "cpe:/a:activecampaign:triolive:1.27", "cpe:/a:activecampaign:triolive:1.35", "cpe:/a:activecampaign:triolive:1.04", "cpe:/a:activecampaign:triolive:1.13", "cpe:/a:activecampaign:triolive:1.50.1", "cpe:/a:activecampaign:triolive:1.28", "cpe:/a:activecampaign:triolive:1.17", "cpe:/a:activecampaign:triolive:1.18", "cpe:/a:activecampaign:triolive:1.20", "cpe:/a:activecampaign:triolive:1.14", "cpe:/a:activecampaign:triolive:1.58.5", "cpe:/a:activecampaign:triolive:1.21", "cpe:/a:activecampaign:triolive:1.16", "cpe:/a:activecampaign:triolive:1.39", "cpe:/a:activecampaign:triolive:1.58.3", "cpe:/a:activecampaign:triolive:1.58.0", "cpe:/a:activecampaign:triolive:1.30", "cpe:/a:activecampaign:triolive:1.09", "cpe:/a:activecampaign:triolive:1.56.5", "cpe:/a:activecampaign:triolive:1.56.1", "cpe:/a:activecampaign:triolive:1.03", "cpe:/a:activecampaign:triolive:1.15", "cpe:/a:activecampaign:triolive:1.26", "cpe:/a:activecampaign:triolive:unknown", "cpe:/a:activecampaign:triolive:1.33", "cpe:/a:activecampaign:triolive:1.22", "cpe:/a:activecampaign:triolive:1.57", "cpe:/a:activecampaign:triolive:1.05", "cpe:/a:activecampaign:triolive:1.50.6", "cpe:/a:activecampaign:triolive:1.31", "cpe:/a:activecampaign:triolive:1.25", "cpe:/a:activecampaign:triolive:1.37", "cpe:/a:activecampaign:triolive:1.40", "cpe:/a:activecampaign:triolive:1.12", "cpe:/a:activecampaign:triolive:1.55.2", "cpe:/a:activecampaign:triolive:1.0"], "affectedSoftware": [{"name": "activecampaign triolive", "operator": "eq", "version": "1.21"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.08"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.11"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.58.0"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.31"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.05"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.13"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.12"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.03"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.18"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.37"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.19"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.50.2"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.50.3"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.17"}, {"name": "activecampaign triolive", "operator": "eq", "version": "unknown"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.14"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.04"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.50.6"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.56.5"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.0"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.10"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.26"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.34"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.24"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.56.3"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.55.2"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.23"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.40"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.29"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.41"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.30"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.33"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.58.1"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.22"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.50.5"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.27"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.07"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.58.2"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.57"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.25"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.50.1"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.28"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.55.0"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.58.4"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.39"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.58.3"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.56.4"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.55.1"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.58.5"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.32"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.15"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.06"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.36"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.42"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.09"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.20"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.35"}, {"name": "activecampaign triolive", "operator": "le", "version": "1.58.6"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.56.2"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.50.4"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.16"}, {"name": "activecampaign triolive", "operator": "eq", "version": "1.56.1"}], "cvss2": {"cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true}, "cvss3": {}, "cpe23": ["cpe:2.3:a:activecampaign:triolive:1.58.0:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:unknown:beta3:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.56.5:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.05:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.25:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.56.1:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.37:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.13:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.34:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.41:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.09:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.31:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:unknown:beta2:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.50.2:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.32:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.16:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.39:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.18:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.55.0:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.08:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.58.5:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.28:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.42:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.29:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.58.1:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.57:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.58.2:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.19:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.36:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.30:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.50.1:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.50.5:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.03:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.40:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:unknown:beta5:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.11:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.23:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.07:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.50.6:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.04:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.15:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.20:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.22:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.0:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.24:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.33:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.58.4:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.50.4:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.35:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.55.1:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.56.2:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.58.3:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.56.3:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.14:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.21:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.27:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.06:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.50.3:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.56.4:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.55.2:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.12:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.10:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.26:*:*:*:*:*:*:*", "cpe:2.3:a:activecampaign:triolive:1.17:*:*:*:*:*:*:*"], "cwe": ["CWE-79"]}

{}