CVE-2008-4530

Cross-site scripting (XSS) vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote authenticated users with permissions to inject arbitrary web script or HTML via unspecified vectors related to posting of answers.

• CWE-79

• http://drupal.org/node/315919Patch, Vendor Advisory
• http://secunia.com/advisories/32106Vendor Advisory
• http://www.securityfocus.com/bid/31554
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45636
• http://drupal.org/node/315919Patch, Vendor Advisory
• http://secunia.com/advisories/32106Vendor Advisory
• http://www.securityfocus.com/bid/31554
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45636

Published

Oct 9, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4524SQL injection vulnerability in the "Check User" feature (inc…
• CVE-2008-4525SQL injection vulnerability in index.php in AmpJuke 0.7.5 al…
• CVE-2008-4526Multiple directory traversal vulnerabilities in CCMS 3.1 all…
• CVE-2008-4527SQL injection vulnerability in recept.php in the Recepies (R…
• CVE-2008-4528Directory traversal vulnerability in notes.php in Phlatline'…
• CVE-2008-4529Multiple PHP remote file inclusion vulnerabilities in asiCMS…
• CVE-2008-4531SQL injection vulnerability in Brilliant Gallery 5.x before …
• CVE-2008-4532Cross-site scripting (XSS) vulnerability in index.php in Max…
• CVE-2008-4533Cross-site scripting (XSS) vulnerability in Kantan WEB Serve…
• CVE-2008-4534SQL injection vulnerability in EC-CUBE Ver2 2.1.2a and earli…
• CVE-2008-4535Cross-site scripting (XSS) vulnerability in EC-CUBE Ver2 2.1…
• CVE-2008-4536Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4…