CVE-2008-5056

Cross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the department_id parameter to index.php.

Link	Resource
http://activecampaign.com/support/forum/showthread.php?t=4554	Patch Vendor Advisory
http://holisticinfosec.org/content/view/93/45/
http://osvdb.org/49858
http://www.securityfocus.com/bid/32268
https://exchange.xforce.ibmcloud.com/vulnerabilities/46560

Configuration 1

cpe:2.3:a:activecampaign:triolive:1.31:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.50.1:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.19:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.33:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.05:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:unknown:beta3:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.06:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.56.2:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.39:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.13:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.58.1:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.30:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.09:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.18:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.56.5:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.16:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.58.3:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.23:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.24:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.57:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.0:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:unknown:beta5:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.27:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.50.5:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.58.4:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.11:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.36:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.41:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.56.1:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.32:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.10:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.20:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.12:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.22:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.17:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.58.0:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.08:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.56.4:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.55.2:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.55.0:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.50.6:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.03:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.50.2:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.26:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.37:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.29:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.42:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:*:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.25:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.50.4:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.28:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.21:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.35:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.58.5:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.04:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.40:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.55.1:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.50.3:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.56.3:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.07:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:unknown:beta2:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.58.2:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.34:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.15:*:*:*:*:*:*:* cpe:2.3:a:activecampaign:triolive:1.14:*:*:*:*:*:*:*

---

Published : 2008-11-13 11:30

Updated : 2017-08-08 01:33

---

NVD link : CVE-2008-5056

Mitre link : CVE-2008-5056

No products.

CWE-79