CVE-2004-2245

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage parameter to viewpic.php.

Ссылки

http://securitytracker.com/id?1012062
Exploit
http://www.osvdb.org/11318
http://www.osvdb.org/11319
Exploit
Patch
http://www.osvdb.org/11320
Exploit
Patch
http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt
Exploit
http://www.securityfocus.com/bid/11587
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/17957
http://securitytracker.com/id?1012062
Exploit
http://www.osvdb.org/11318
http://www.osvdb.org/11319
Exploit
Patch
http://www.osvdb.org/11320
Exploit
Patch
http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt
Exploit
http://www.securityfocus.com/bid/11587
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/17957

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:goollery:goollery:0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01137

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-vc89-2rr6-2h4r

github

почти 4 года назад