CVEvulnerability

CVE-2008-5056

4.3 MEDIUM Published 2008-11-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-11-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the department_id parameter to index.php.

Affected configurations

• activecampaign triolive (<= 1.58.6) • activecampaign triolive 1.0 • activecampaign triolive 1.03 • activecampaign triolive 1.04 • activecampaign triolive 1.05 • activecampaign triolive 1.06 • activecampaign triolive 1.07 • activecampaign triolive 1.08 • activecampaign triolive 1.09 • activecampaign triolive 1.10 • activecampaign triolive 1.11 • activecampaign triolive 1.12 • activecampaign triolive 1.13 • activecampaign triolive 1.14 • activecampaign triolive 1.15 • activecampaign triolive 1.16 • activecampaign triolive 1.17 • activecampaign triolive 1.18 • activecampaign triolive 1.19 • activecampaign triolive 1.20 • activecampaign triolive 1.21 • activecampaign triolive 1.22 • activecampaign triolive 1.23 • activecampaign triolive 1.24 • activecampaign triolive 1.25 • activecampaign triolive 1.26 • activecampaign triolive 1.27 • activecampaign triolive 1.28 • activecampaign triolive 1.29 • activecampaign triolive 1.30 • activecampaign triolive 1.31 • activecampaign triolive 1.32 • activecampaign triolive 1.33 • activecampaign triolive 1.34 • activecampaign triolive 1.35 • activecampaign triolive 1.36 • activecampaign triolive 1.37 • activecampaign triolive 1.39 • activecampaign triolive 1.40 • activecampaign triolive 1.41 • activecampaign triolive 1.42 • activecampaign triolive 1.50.1 • activecampaign triolive 1.50.2 • activecampaign triolive 1.50.3 • activecampaign triolive 1.50.4 • activecampaign triolive 1.50.5 • activecampaign triolive 1.50.6 • activecampaign triolive 1.55.0 • activecampaign triolive 1.55.1 • activecampaign triolive 1.55.2 • activecampaign triolive 1.56.1 • activecampaign triolive 1.56.2 • activecampaign triolive 1.56.3 • activecampaign triolive 1.56.4 • activecampaign triolive 1.56.5 • activecampaign triolive 1.57 • activecampaign triolive 1.58.0 • activecampaign triolive 1.58.1 • activecampaign triolive 1.58.2 • activecampaign triolive 1.58.3 … and 3 more

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References