CVE		CVE-2008-5814
Status		Candidate
Description		Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.
Phase		Assigned (02.01.2009)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-5814
References		JVN : JVN#50327700
		JVNDB : JVNDB-2008-000084
SecurityVulns:		HP System Management Homepage crossite scripting
		HP System Management Homepage multiple security vulnerabilities