CVE-2008-2527 Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnaly...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the language parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| actualscripts actualanalyzer gold | = 7.21 | No fix listed |
| actualscripts actualanalyzer gold | = 7.22 | No fix listed |
| actualscripts actualanalyzer gold | = 7.23 | No fix listed |
| actualscripts actualanalyzer gold | = 7.24 | No fix listed |
| actualscripts actualanalyzer gold | = 7.25 | No fix listed |
| actualscripts actualanalyzer gold | = 7.31 | No fix listed |
| actualscripts actualanalyzer gold | = 7.32 | No fix listed |
| actualscripts actualanalyzer gold | = 7.33 | No fix listed |
| actualscripts actualanalyzer gold | = 7.34 | No fix listed |
| actualscripts actualanalyzer gold | = 7.35 | No fix listed |
| actualscripts actualanalyzer gold | = 7.41 | No fix listed |
| actualscripts actualanalyzer gold | = 7.42 | No fix listed |
| actualscripts actualanalyzer gold | = 7.43 | No fix listed |
| actualscripts actualanalyzer gold | = 7.51 | No fix listed |
| actualscripts actualanalyzer gold | = 7.61 | No fix listed |
| actualscripts actualanalyzer gold | = 7.62 | No fix listed |
| actualscripts actualanalyzer gold | = 7.63 | No fix listed |
| actualscripts actualanalyzer gold | = 7.64 | No fix listed |
| actualscripts actualanalyzer gold | = 7.71 | No fix listed |
| actualscripts actualanalyzer gold | = 7.72 | No fix listed |
| actualscripts actualanalyzer gold | = 7.73 | No fix listed |
| actualscripts actualanalyzer gold | = 7.74 | No fix listed |
| actualscripts actualanalyzer lite | <= 2.78 | No fix listed |
| actualscripts actualanalyzer lite | = 2.77 | No fix listed |
| actualscripts actualanalyzer pro | <= 6.95 | No fix listed |
Show 33 more
| Product | Affected versions | Fixed in |
|---|---|---|
| actualscripts actualanalyzer pro | = 6.65 | No fix listed |
| actualscripts actualanalyzer pro | = 6.67 | No fix listed |
| actualscripts actualanalyzer pro | = 6.68 | No fix listed |
| actualscripts actualanalyzer pro | = 6.69 | No fix listed |
| actualscripts actualanalyzer pro | = 6.71 | No fix listed |
| actualscripts actualanalyzer pro | = 6.72 | No fix listed |
| actualscripts actualanalyzer pro | = 6.73 | No fix listed |
| actualscripts actualanalyzer pro | = 6.81 | No fix listed |
| actualscripts actualanalyzer pro | = 6.82 | No fix listed |
| actualscripts actualanalyzer pro | = 6.83 | No fix listed |
| actualscripts actualanalyzer pro | = 6.85 | No fix listed |
| actualscripts actualanalyzer pro | = 6.86 | No fix listed |
| actualscripts actualanalyzer pro | = 6.87 | No fix listed |
| actualscripts actualanalyzer pro | = 6.88 | No fix listed |
| actualscripts actualanalyzer pro | = 6.89 | No fix listed |
| actualscripts actualanalyzer pro | = 6.91 | No fix listed |
| actualscripts actualanalyzer pro | = 6.92 | No fix listed |
| actualscripts actualanalyzer pro | = 6.93 | No fix listed |
| actualscripts actualanalyzer pro | = 6.94 | No fix listed |
| actualscripts actualanalyzer server | <= 8.37 | No fix listed |
| actualscripts actualanalyzer server | = 8.02 | No fix listed |
| actualscripts actualanalyzer server | = 8.11 | No fix listed |
| actualscripts actualanalyzer server | = 8.21 | No fix listed |
| actualscripts actualanalyzer server | = 8.22 | No fix listed |
| actualscripts actualanalyzer server | = 8.23 | No fix listed |
| actualscripts actualanalyzer server | = 8.24 | No fix listed |
| actualscripts actualanalyzer server | = 8.25 | No fix listed |
| actualscripts actualanalyzer server | = 8.31 | No fix listed |
| actualscripts actualanalyzer server | = 8.32 | No fix listed |
| actualscripts actualanalyzer server | = 8.33 | No fix listed |
| actualscripts actualanalyzer server | = 8.34 | No fix listed |
| actualscripts actualanalyzer server | = 8.35 | No fix listed |
| actualscripts actualanalyzer server | = 8.36 | No fix listed |
References
- 30205 third-party-advisory vendor-advisory
- www.majorsecurity.de
- 20080512 [MajorSecurity Advisory #52]ActualAnalyzer family - Cross Site Scripting Issues mailing-list
- 29177 vdb-entry
- actualanalyzer-view-xss(42367) vdb-entry