Strix
26.1K

CVE-2008-5056

UnknownEPSS 1.07%

Last modified

CVE-2008-5056 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the department_id parameter to index.php.. EPSS estimates a 1.07% chance of exploitation in the next 30 days.

Description

Cross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the department_id parameter to index.php.

Metrics

EPSS Probability
1.07%

60.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
ActivecampaignTriolive<= 1.58.6—
ActivecampaignTriolive1.0—
ActivecampaignTriolive1.03—
ActivecampaignTriolive1.04—
ActivecampaignTriolive1.05—
ActivecampaignTriolive1.06—
ActivecampaignTriolive1.07—
ActivecampaignTriolive1.08—
ActivecampaignTriolive1.09—
ActivecampaignTriolive1.10—
ActivecampaignTriolive1.11—
ActivecampaignTriolive1.12—
ActivecampaignTriolive1.13—
ActivecampaignTriolive1.14—
ActivecampaignTriolive1.15—
ActivecampaignTriolive1.16—
ActivecampaignTriolive1.17—
ActivecampaignTriolive1.18—
ActivecampaignTriolive1.19—
ActivecampaignTriolive1.20—
ActivecampaignTriolive1.21—
ActivecampaignTriolive1.22—
ActivecampaignTriolive1.23—
ActivecampaignTriolive1.24—
ActivecampaignTriolive1.25—
ActivecampaignTriolive1.26—
ActivecampaignTriolive1.27—
ActivecampaignTriolive1.28—
ActivecampaignTriolive1.29—
ActivecampaignTriolive1.30—
ActivecampaignTriolive1.31—
ActivecampaignTriolive1.32—
ActivecampaignTriolive1.33—
ActivecampaignTriolive1.34—
ActivecampaignTriolive1.35—
ActivecampaignTriolive1.36—
ActivecampaignTriolive1.37—
ActivecampaignTriolive1.39—
ActivecampaignTriolive1.40—
ActivecampaignTriolive1.41—
ActivecampaignTriolive1.42—
ActivecampaignTriolive1.50.1—
ActivecampaignTriolive1.50.2—
ActivecampaignTriolive1.50.3—
ActivecampaignTriolive1.50.4—
ActivecampaignTriolive1.50.5—
ActivecampaignTriolive1.50.6—
ActivecampaignTriolive1.55.0—
ActivecampaignTriolive1.55.1—
ActivecampaignTriolive1.55.2—

Showing 50 of 63 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2008-5056?
Cross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the department_id parameter to index.php.
How severe is CVE-2008-5056?
Severity scoring for CVE-2008-5056 is pending analysis. The EPSS model estimates a 1.07% probability of exploitation in the next 30 days.
How do I fix CVE-2008-5056?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2008-5056?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST