Description

Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.

Remediation

References

CVE-2008-5814

Related Vulnerabilities

WordPress Plugin User Role Editor Cross-Site Scripting (4.37)

concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-19146)

GlassFish CVE-2018-3152 Vulnerability (CVE-2018-3152)

WordPress Plugin Community Events 'id' Parameter SQL Injection (1.2.2)

e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3444)

Severity

Low

Classification

CVE-2008-5814 CWE-707

Tags

Missing Update Known Vulnerabilities