EUVD-2008-4132

Malware in sbrugna...

CVE-2008-4149

Cross-site scripting XSS vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link page header" field...

Cross site scripting

Cross-site scripting XSS vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link page header" field...

CVE-2008-4149

CVE-2008-4149 is a documented XSS vulnerability in the Drupal module “Link to Us” (Greg Holsclaw) for 5.x versions prior to 5.x-1.1. The issue resides in the Link page header input, allowing injection of arbitrary web script or HTML. Impact described as cross-site scripting; exploitation details ...

CVE-2008-4149

Cross-site scripting XSS vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link page header" field...

CVE-2008-4149: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link page header" field...

SA-2008-052 - Link To Us - Cross site scripting

The Link To Us module creates a page to display uploaded banners that can be used by others to link to your Drupal site. The module will create well formed SEO links with full title, alt and anchor text determined by the node title, taxonomy term or other pages that are directed to the module...