CVE-2008-5591

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter and possibly other "login fields." NOTE: some of these details are obtained from third party information.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Dec 16, 2008
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2008

CVE-2008-55925.0Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackersCVE-2008-55937.5Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execute arbitrary local fiCVE-2008-55947.5Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execute arbitrary local fCVE-2008-55957.5SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter.CVE-2008-55965.0Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackeCVE-2008-55975.0Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the datCVE-2008-55985.0Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. (dotCVE-2008-55997.5SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the passwCVE-2008-56005.0Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to doCVE-2008-56015.0User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to downCVE-2008-56025.0Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download CVE-2008-56035.0ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download th
CVE-2008-5591: Medium severity, CVSS 4.3 | Vulnix