Every CVE Search/ Get API key

CVE-2008-5814

Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors...

2.6 Low

Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.

Exploit likelihood

1.86%Down 1.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.6

Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.

Record
CVE-2008-5814
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.

Record
CVE-2008-5814
Updated
2026-11-02
EUVDEUVD-2008-5784 No score

Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.

Record
EUVD-2008-5784
Updated
2026-11-03
GitHub AdvisoriesGHSA-qmvx-3c3m-8hg9 No score

Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors...

Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.

Record
GHSA-qmvx-3c3m-8hg9
Weakness
CWE-79
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php5
Debian:4.0
From an advisory covering 8 CVEs
 before 5.2.0+dfsg-8+etch15, plus listed versions
5.2.0-105.2.0-10+lenny15.2.0-115.2.0-8+etch15.2.0-8+etch10
Show 12 moreShow less
5.2.0-8+etch115.2.0-8+etch11~p15.2.0-8+etch135.2.0-8+etch35.2.0-8+etch45.2.0-8+etch5~pu15.2.0-8+etch65.2.0-8+etch75.2.0-8+etch85.2.0-8+etch95.2.0-8+etch9~bpo31+15.2.0-9
5.2.0+dfsg-8+etch15
php5
Debian:5.0
From an advisory covering 8 CVEs
 before 5.2.6.dfsg.1-1+lenny3, plus listed versions
5.2.6.dfsg.1-1+lenny2
5.2.6.dfsg.1-1+lenny3
php
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-bcmath
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-cli
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-common
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-dba
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-gd
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
Show 52 moreShow less
Affected packages
PackageAffectedFixed
php-imap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-ldap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-mbstring
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-mysql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-ncurses
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-odbc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-pdo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-pgsql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-snmp
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-soap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-xml
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-xmlrpc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-bcmath
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-cli
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-common
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-dba
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-gd
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-imap
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-ldap
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-mbstring
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-mysql
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-ncurses
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-odbc
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-pdo
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-pgsql
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-snmp
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-soap
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-xml
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php-xmlrpc
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:5.1.6-23.2.el5_3
0:5.1.6-23.2.el5_3
php
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-bcmath
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-cli
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-common
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-dba
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-debuginfo
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-devel
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-gd
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-imap
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-ldap
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-mbstring
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-mysql
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-ncurses
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-odbc
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-pdo
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-pgsql
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-snmp
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-soap
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-xml
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2
php-xmlrpc
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.6-4.el5s2
0:5.2.6-4.el5s2

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-5814 is a low vulnerability (CVSS 2.6) in Php, published January 2, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.86%, the 79th percentile. No source names a fixed version.

References

Show 49 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open