CVE-2008-5059

Published: Nov 13, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript event in the new_language parameter in a login action.

Affected (16)

Products: Modernbill: Modernbill

Modernbill

1 product

Modernbill

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Modernbill Modernbill	Up to 4.4
Modernbill Modernbill	Up to 4.4.0
Modernbill Modernbill	Version 2.01
Modernbill Modernbill	Version 2.02s
Modernbill Modernbill	Version 3.0 beta
Modernbill Modernbill	Version 3.1.0
Modernbill Modernbill	Version 3.1.3
Modernbill Modernbill	Version 4.0.1 rc7
Modernbill Modernbill	Version 4.0.1 rc8
Modernbill Modernbill	Version 4.0.2
Modernbill Modernbill	Version 4.1.1
Modernbill Modernbill	Version 4.1.2
Modernbill Modernbill	Version 4.1.3
Modernbill Modernbill	Version 4.2.1
Modernbill Modernbill	Version 4.3.0
Modernbill Modernbill	Version 4.3.2