Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2008-5508

Quick assessment

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Firefox是Mozilla所发布的开源WEB浏览器。如果在URL的开头放置某些控制字符的话，解析程序就会生成畸形的URL输出。

AI Predicted 4.3 Difficulty: Moderate EPSS 2.22% · P81 Updated Feb 21, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2008-5508

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Mozilla Firefox URL 控制字符解析漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Firefox是Mozilla所发布的开源WEB浏览器。如果在URL的开头放置某些控制字符的话，解析程序就会生成畸形的URL输出。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2008-5508

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2008-5508

请登录查看更多情报信息。

Vendor Advisories for CVE-2008-5508 (33)

https://bugzilla.mozilla.org/show_bug.cgi?id=425046 x_refsource_MISC
https://bugzilla.mozilla.org/show_bug.cgi?id=460803 x_refsource_MISC
http://www.mozilla.org/security/announce/2008/mfsa2008-66.html x_refsource_CONFIRM
http://secunia.com/advisories/33547 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/33231 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/33188 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/33421 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/35080 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/33205 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/34501 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/33408 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/33434 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/33415 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/33203 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/33204 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/33184 third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/32882 vdb-entry x_refsource_BID
http://secunia.com/advisories/33189 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/33216 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/33433 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/33523 third-party-advisory x_refsource_SECUNIA
http://www.securitytracker.com/id?1021426 vdb-entry x_refsource_SECTRACK
http://www.debian.org/security/2009/dsa-1696 vendor-advisory x_refsource_DEBIAN
http://www.debian.org/security/2009/dsa-1697 vendor-advisory x_refsource_DEBIAN
http://www.debian.org/security/2009/dsa-1704 vendor-advisory x_refsource_DEBIAN
http://www.debian.org/security/2009/dsa-1707 vendor-advisory x_refsource_DEBIAN
https://usn.ubuntu.com/690-1/ vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/usn-701-2 vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/usn-701-1 vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/usn-690-2 vendor-advisory x_refsource_UBUNTU
http://www.vupen.com/english/advisories/2009/0977 vdb-entry x_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 vendor-advisory x_refsource_MANDRIVA
https://exchange.xforce.ibmcloud.com/vulnerabilities/47414 vdb-entry x_refsource_XF

Other References for CVE-2008-5508 (5)

http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 vendor-advisory x_refsource_SUNALERT
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 vendor-advisory x_refsource_SUNALERT
http://www.redhat.com/support/errata/RHSA-2009-0002.html vendor-advisory x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2008-1037.html vendor-advisory x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2008-1036.html vendor-advisory x_refsource_REDHAT

https://www.cve.org/CVERecord?id=CVE-2008-5508

Same Patch Batch · n/a · 2008-12-17 · 72 CVEs total

CVE-2008-5649		AlstraSoft Article Manager Pro 'admin/admin.php' SQL注入漏洞
CVE-2008-5507		Mozilla Firefox 2.0.0.19和3.0.5版本修复多个安全漏洞
CVE-2008-5505		Mozilla Firefox 2.0.0.19和3.0.5版本修复多个安全漏洞
CVE-2008-5656		TYPO3 frontend插件跨站脚本攻击漏洞
CVE-2008-5655		MyioSoft EasyBookMarker 'bookmarker_backend.php' SQL注入漏洞
CVE-2008-5654		MyioSoft EasyCalendar 'ajaxp.php' SQL注入攻击漏洞
CVE-2008-5653		MyioSoft AjaxPortal 跨站脚本漏洞
CVE-2008-5652		MyioSoft EasyBookMarker 'ajaxp.php' SQL注入攻击漏洞
CVE-2008-5651		MyioSoft EasyBookMarker 'bookmarker_backend.php' SQL注入漏洞
CVE-2008-5650		AlstraSoft Web Host Directory 'Password' Parameter SQL注入漏洞
CVE-2008-5657		Quassel Core CTCP Ping 输入注入漏洞
CVE-2008-5648		DeltaScripts PHP Shop 'admin/login.php' 多个SQL注入漏洞
CVE-2008-5647		Trac sanitizer过滤器钓鱼攻击漏洞
CVE-2008-5646		Trac wiki标示字体拒绝服务攻击漏洞
CVE-2008-5645		Orb Networks Orb 未明目录遍历漏洞
CVE-2008-5644		TYPO3 File backend 模板跨站攻击漏洞
CVE-2008-5643		Joomla! and Mambo Books Component 'book_id' Parameter SQL注入漏洞
CVE-2008-5642		CMS Made Simple 'cms_language' Cookie Parameter 目录遍历漏洞
CVE-2008-5641		Active Photo Gallery 'account.asp'SQL注入攻击漏洞
CVE-2008-5640		ActiveWebSoftwares Active Bids 'bidhistory.asp' SQL注入漏洞

Showing top 20 of 72 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2008-5508

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2008-5508

Quick assessment

I. Basic Information for CVE-2008-5508

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2008-5508

III. Intelligence Information for CVE-2008-5508

Vendor Advisories for CVE-2008-5508 (33)

Other References for CVE-2008-5508 (5)

Same Patch Batch · n/a · 2008-12-17 · 72 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2008-5508

Leave a comment