Vulnerability Database

317,827

Total vulnerabilities in the database

CVE-2008-4149

Cross-site scripting (XSS) vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link page header" field.

Published: Sep 24, 2008
Updated: Nov 9, 2025
CVE: CVE-2008-4149
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
drupal / link_to_us	-	5.x-1.0.x
drupal / link_to_us	5.x-1.x-dev	5.x-1.x-dev.x

http://drupal.org/node/309861
http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064527.html
http://secunia.com/advisories/31914
http://www.securityfocus.com/bid/31224
http://www.vupen.com/english/advisories/2008/2618
https://exchange.xforce.ibmcloud.com/vulnerabilities/45221

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo