CVE-2008-4149

Vulnerability

The Link to Us module for Drupal 5.x (versions prior to 5.x-1.1) does not properly escape text in the "Link page header" field, allowing remote authenticated users to inject arbitrary web script or HTML. The 6.x development version is also vulnerable, but a fix is included in the next development snapshot. [1]

Exploitation

An attacker must be a remote authenticated user with permission to post content, specifically to set the "Link page header" field. The attacker can then insert malicious script or HTML into that field, which will be executed when other users view the page. No special network position is required beyond normal web access. [1]

Impact

Successful exploitation leads to cross-site scripting (XSS), allowing the attacker to execute arbitrary JavaScript in the context of the victim's browser. This can result in session hijacking, defacement, or other malicious actions. The impact is limited to the scope of the affected page. [1]

Mitigation

Upgrade to Link to Us 5.x-1.1 for Drupal 5.x. For the 6.x development version, a fix will appear in the next development snapshot (within 12 hours of the advisory). No other workarounds are mentioned. [1]