CVE-2008-1976

Multiple cross-site scripting (XSS) vulnerabilities in the Drupal modules (1) Internationalization (i18n) 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and (2) Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• https://drupal.org/node/250344Patch, Third Party Advisory
• https://secunia.com/advisories/29961Third Party Advisory
• https://www.securityfocus.com/bid/28916Third Party Advisory, VDB Entry
• https://www.vupen.com/english/advisories/2008/1352/referencesPermissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41977Third Party Advisory, VDB Entry
• https://drupal.org/node/250344Patch, Third Party Advisory
• https://secunia.com/advisories/29961Third Party Advisory
• https://www.securityfocus.com/bid/28916Third Party Advisory, VDB Entry
• https://www.vupen.com/english/advisories/2008/1352/referencesPermissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41977Third Party Advisory, VDB Entry

Published

Apr 27, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-1970muCommander before 0.8.2 stores credentials.xml with insecur…
• CVE-2008-1971phShoutBox Final 1.5 and earlier only checks passwords when …
• CVE-2008-1972Multiple cross-site scripting (XSS) vulnerabilities in the u…
• CVE-2008-1973Heap-based buffer overflow in SubEdit Player build 4056 and …
• CVE-2008-1974Cross-site scripting (XSS) vulnerability in addevent.php in …
• CVE-2008-1975SQL injection vulnerability in index.php in E-RESERV 2.1 all…
• CVE-2008-1977Cross-site request forgery (CSRF) vulnerability in the Inter…
• CVE-2008-1978Cross-site scripting (XSS) vulnerability in the Ubercart 5.x…
• CVE-2008-1979The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.…
• CVE-2008-1980Cross-site scripting (XSS) vulnerability in E-Publish 5.x be…
• CVE-2008-1981Cross-site request forgery (CSRF) vulnerability in E-Publish…
• CVE-2008-1982SQL injection vulnerability in ss_load.php in the Spreadshee…