VULNERABILITY INTELLIGENCE
CVE-2008-4146
CVSS score5 MEDIUM
EPSS probability2.20%
CISA KEVNot currently listed
Published2008-09-24
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Addalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions via a modified approved field and (2) change the visit-counter value via a modified counter field.
Weakness classification
- CWE-287: Improper Authentication