CVE-2008-4146: Addalink

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Addalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions via a modified approved field and (2) change the visit-counter value via a modified counter field.

Affected products

• Addalink Addalink: up to and including 1.0

Published 2008-09-24. Last modified 2026-06-16.