Description

Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.

Remediation

References

CVE-2008-5814

Related Vulnerabilities

WordPress Plugin File Manager Advanced Shortcode Arbitrary File Upload (2.5.3)

Spring Cloud Gateway Improper Certificate Validation Vulnerability (CVE-2022-22946)

WordPress Plugin Slider by 10Web-Responsive Image Slider Cross-Site Request Forgery (1.2.22)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-2092)

WordPress Plugin Xorbin Analog Flash Clock Cross-Site Scripting (1.0)

Severity

Low

Classification

CVE-2008-5814 CWE-707

Tags

Missing Update Known Vulnerabilities