CVE-2008-5584

Multiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) a message, (2) a milestone, or (3) a display name in a profile, or the (4) a or (5) c parameter to index.php.

• CWE-79

• http://secunia.com/advisories/29016Vendor Advisory
• http://securityreason.com/securityalert/4734
• http://www.projectpier.org/node/679Patch, Vendor Advisory, URL Repurposed
• http://www.securityfocus.com/archive/1/488294/100/200/threaded
• http://www.securityfocus.com/bid/27857
• http://secunia.com/advisories/29016Vendor Advisory
• http://securityreason.com/securityalert/4734
• http://www.projectpier.org/node/679Patch, Vendor Advisory, URL Repurposed
• http://www.securityfocus.com/archive/1/488294/100/200/threaded
• http://www.securityfocus.com/bid/27857

Published

Dec 15, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5578Multiple SQL injection vulnerabilities in index.php in sCssB…
• CVE-2008-5579Absolute path traversal vulnerability in mini-pub.php/front-…
• CVE-2008-5580mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote…
• CVE-2008-5581PHP remote file inclusion vulnerability in mini-pub.php/fron…
• CVE-2008-5582SQL injection vulnerability in utilities/login.asp in Nukedi…
• CVE-2008-5583Cross-site request forgery (CSRF) vulnerability in index.php…
• CVE-2008-5585Multiple PHP remote file inclusion vulnerabilities in lcxBBp…
• CVE-2008-5586SQL injection vulnerability in findoffice.php in Check Up Ne…
• CVE-2008-5587Directory traversal vulnerability in libraries/lib.inc.php i…
• CVE-2008-5588SQL injection vulnerability in rankup.asp in Katy Whitton Ra…
• CVE-2008-5589SQL injection vulnerability in processlogin.asp in Katy Whit…
• CVE-2008-5590SQL injection vulnerability in customer.forumtopic.php in Ka…