CVE:CVE-2008-5056
CNNVD:CNNVD-200811-212
ActiveCampaign TrioLive 中的department_offline_context.php存在跨站脚本攻击漏洞。远程攻击者可以借助到index.php的department_id参数，注入任意的web脚本或HTML。
solution:Upgrade activecampaign triolive to a higher version than 1.58.6,1.0,1.03,1.04,1.05,1.06,1.07,1.08,1.09,1.10,1.11,1.12,1.13,1.14,1.15,1.16,1.17,1.18,1.19,1.20,1.21,1.22,1.23,1.24,1.25,1.26,1.27,1.28,1.29,1.30,1.31,1.32,1.33,1.34,1.35,1.36,1.37,1.39,1.40,1.41,1.42,1.50.1,1.50.2,1.50.3,1.50.4,1.50.5,1.50.6,1.55.0,1.55.1,1.55.2,1.56.1,1.56.2,1.56.3,1.56.4,1.56.5,1.57,1.58.0,1.58.1,1.58.2,1.58.3,1.58.4,1.58.5,unknown:beta2,unknown:beta3,unknown:beta5,and avoid the version (,1.58.6],1.0,1.03,1.04,1.05,1.06,1.07,1.08,1.09,1.10,1.11,1.12,1.13,1.14,1.15,1.16,1.17,1.18,1.19,1.20,1.21,1.22,1.23,1.24,1.25,1.26,1.27,1.28,1.29,1.30,1.31,1.32,1.33,1.34,1.35,1.36,1.37,1.39,1.40,1.41,1.42,1.50.1,1.50.2,1.50.3,1.50.4,1.50.5,1.50.6,1.55.0,1.55.1,1.55.2,1.56.1,1.56.2,1.56.3,1.56.4,1.56.5,1.57,1.58.0,1.58.1,1.58.2,1.58.3,1.58.4,1.58.5,unknown:beta2,unknown:beta3,unknown:beta5