CVE-2009-0603

LOW 3.5CVE-2009-0603 · Published 16/02/2009 · updated 16/06/2026

In short

CVE-2009-0603 is a LOW (CVSS 3.5) vulnerability affecting link module (drupal).
Chance of exploitation in the next 30 days (EPSS): 0.87%, higher than 58.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
link module drupal	`= 5.x-2.5`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via the description parameter (aka the Help field). NOTE: some of these details are obtained from third party information.

References

archives.neohapsis.com/archives/fulldisclosure/2009-02/0036.html
osvdb.org/51780
secunia.com/advisories/33835 · Vendor Advisory
securityfocus.com/bid/33642
exchange.xforce.ibmcloud.com/vulnerabilities/48553

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free