Read the docs
TI-2008-02419 Aliases CVE-2008-2527GHSA-8w2p-hff5-7873

Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer…

Priority LOW 22CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the language parameter.

Why it matters now

EPSS 0.01065 64th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 58

CPEVersionsRoleVendor
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.21:*:*:*:*:*:*:*7.21VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.22:*:*:*:*:*:*:*7.22VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.23:*:*:*:*:*:*:*7.23VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.24:*:*:*:*:*:*:*7.24VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.25:*:*:*:*:*:*:*7.25VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.31:*:*:*:*:*:*:*7.31VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.32:*:*:*:*:*:*:*7.32VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.33:*:*:*:*:*:*:*7.33VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.34:*:*:*:*:*:*:*7.34VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.35:*:*:*:*:*:*:*7.35VulnerableActualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.21:*:*:*:*:*:*:* Versions 7.21 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.22:*:*:*:*:*:*:* Versions 7.22 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.23:*:*:*:*:*:*:* Versions 7.23 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.24:*:*:*:*:*:*:* Versions 7.24 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.25:*:*:*:*:*:*:* Versions 7.25 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.31:*:*:*:*:*:*:* Versions 7.31 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.32:*:*:*:*:*:*:* Versions 7.32 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.33:*:*:*:*:*:*:* Versions 7.33 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.34:*:*:*:*:*:*:* Versions 7.34 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.35:*:*:*:*:*:*:* Versions 7.35 Vulnerable ·Actualscripts
Show 48 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.41:*:*:*:*:*:*:*7.41VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.42:*:*:*:*:*:*:*7.42VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.43:*:*:*:*:*:*:*7.43VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.51:*:*:*:*:*:*:*7.51VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.61:*:*:*:*:*:*:*7.61VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.62:*:*:*:*:*:*:*7.62VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.63:*:*:*:*:*:*:*7.63VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.64:*:*:*:*:*:*:*7.64VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.71:*:*:*:*:*:*:*7.71VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.72:*:*:*:*:*:*:*7.72VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.73:*:*:*:*:*:*:*7.73VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_gold:7.74:*:*:*:*:*:*:*7.74VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_lite:*:*:*:*:*:*:*:*up to 2.78VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_lite:2.77:*:*:*:*:*:*:*2.77VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:*:*:*:*:*:*:*:*up to 6.95VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.65:*:*:*:*:*:*:*6.65VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.67:*:*:*:*:*:*:*6.67VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.68:*:*:*:*:*:*:*6.68VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.69:*:*:*:*:*:*:*6.69VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.71:*:*:*:*:*:*:*6.71VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.72:*:*:*:*:*:*:*6.72VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.73:*:*:*:*:*:*:*6.73VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.81:*:*:*:*:*:*:*6.81VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.82:*:*:*:*:*:*:*6.82VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.83:*:*:*:*:*:*:*6.83VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.85:*:*:*:*:*:*:*6.85VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.86:*:*:*:*:*:*:*6.86VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.87:*:*:*:*:*:*:*6.87VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.88:*:*:*:*:*:*:*6.88VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.89:*:*:*:*:*:*:*6.89VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.91:*:*:*:*:*:*:*6.91VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.92:*:*:*:*:*:*:*6.92VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.93:*:*:*:*:*:*:*6.93VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_pro:6.94:*:*:*:*:*:*:*6.94VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:*:*:*:*:*:*:*:*up to 8.37VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:8.02:*:*:*:*:*:*:*8.02VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:8.11:*:*:*:*:*:*:*8.11VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:8.21:*:*:*:*:*:*:*8.21VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:8.22:*:*:*:*:*:*:*8.22VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:8.23:*:*:*:*:*:*:*8.23VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:8.24:*:*:*:*:*:*:*8.24VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:8.25:*:*:*:*:*:*:*8.25VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:8.31:*:*:*:*:*:*:*8.31VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:8.32:*:*:*:*:*:*:*8.32VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:8.33:*:*:*:*:*:*:*8.33VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:8.34:*:*:*:*:*:*:*8.34VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:8.35:*:*:*:*:*:*:*8.35VulnerableActualscripts
cpe:2.3:a:actualscripts:actualanalyzer_server:8.36:*:*:*:*:*:*:*8.36VulnerableActualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.41:*:*:*:*:*:*:* Versions 7.41 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.42:*:*:*:*:*:*:* Versions 7.42 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.43:*:*:*:*:*:*:* Versions 7.43 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.51:*:*:*:*:*:*:* Versions 7.51 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.61:*:*:*:*:*:*:* Versions 7.61 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.62:*:*:*:*:*:*:* Versions 7.62 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.63:*:*:*:*:*:*:* Versions 7.63 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.64:*:*:*:*:*:*:* Versions 7.64 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.71:*:*:*:*:*:*:* Versions 7.71 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.72:*:*:*:*:*:*:* Versions 7.72 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.73:*:*:*:*:*:*:* Versions 7.73 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_gold:7.74:*:*:*:*:*:*:* Versions 7.74 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_lite:*:*:*:*:*:*:*:* Versions up to 2.78 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_lite:2.77:*:*:*:*:*:*:* Versions 2.77 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:*:*:*:*:*:*:*:* Versions up to 6.95 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.65:*:*:*:*:*:*:* Versions 6.65 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.67:*:*:*:*:*:*:* Versions 6.67 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.68:*:*:*:*:*:*:* Versions 6.68 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.69:*:*:*:*:*:*:* Versions 6.69 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.71:*:*:*:*:*:*:* Versions 6.71 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.72:*:*:*:*:*:*:* Versions 6.72 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.73:*:*:*:*:*:*:* Versions 6.73 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.81:*:*:*:*:*:*:* Versions 6.81 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.82:*:*:*:*:*:*:* Versions 6.82 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.83:*:*:*:*:*:*:* Versions 6.83 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.85:*:*:*:*:*:*:* Versions 6.85 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.86:*:*:*:*:*:*:* Versions 6.86 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.87:*:*:*:*:*:*:* Versions 6.87 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.88:*:*:*:*:*:*:* Versions 6.88 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.89:*:*:*:*:*:*:* Versions 6.89 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.91:*:*:*:*:*:*:* Versions 6.91 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.92:*:*:*:*:*:*:* Versions 6.92 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.93:*:*:*:*:*:*:* Versions 6.93 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_pro:6.94:*:*:*:*:*:*:* Versions 6.94 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:*:*:*:*:*:*:*:* Versions up to 8.37 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:8.02:*:*:*:*:*:*:* Versions 8.02 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:8.11:*:*:*:*:*:*:* Versions 8.11 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:8.21:*:*:*:*:*:*:* Versions 8.21 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:8.22:*:*:*:*:*:*:* Versions 8.22 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:8.23:*:*:*:*:*:*:* Versions 8.23 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:8.24:*:*:*:*:*:*:* Versions 8.24 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:8.25:*:*:*:*:*:*:* Versions 8.25 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:8.31:*:*:*:*:*:*:* Versions 8.31 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:8.32:*:*:*:*:*:*:* Versions 8.32 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:8.33:*:*:*:*:*:*:* Versions 8.33 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:8.34:*:*:*:*:*:*:* Versions 8.34 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:8.35:*:*:*:*:*:*:* Versions 8.35 Vulnerable ·Actualscripts
  • cpe:2.3:a:actualscripts:actualanalyzer_server:8.36:*:*:*:*:*:*:* Versions 8.36 Vulnerable ·Actualscripts

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-2527
  2. 2026-10-03 Alias added: GHSA-8w2p-hff5-7873

References

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences