Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.
We have discovered 146,315 live websites that are affected by CVE-2008-5814.
| Product | |
| Category | Programming Languages |
| Vulnerable Domains | 146,315 live websites (2.11% of PHP install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 20 versions ( 3.78% of all versions) |
| 6,505 websites | |
| 95,237 websites | |
| 9,684 websites | |
| 4,978 websites | |
| 3,725 websites | |
| 3,699 websites | |
| 3,147 websites | |
| 2,424 websites | |
| 1,687 websites |
| .com | 92,042 websites |
| .de | 8,706 websites |
| .info | 7,819 websites |
| .net | 3,517 websites |
| .ru | 2,097 websites |
| .org | 1,857 websites |
| .cz | 1,309 websites |
| .jp | 1,149 websites |
| .it | 1,141 websites |
| .fr | 875 websites |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *****.***.tw | *,*** | ||
| **********.*****.de | *,*** | ||
| ****.info | **,*** | ||
| ******.com | **,*** | ||
| ******.com | **,*** | ||
| ****.com | **,*** | ||
| *****.com | **,*** | ||
| ******.com | **,*** | ||
| *****.com | **,*** | ||
| *****.com | **,*** |