CVEvulnerability
CVE-2004-2245
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage parameter to viewpic.php.
Affected configurations
• goollery goollery 0.3
References
- http://securitytracker.com/id?1012062 Exploit
- http://www.osvdb.org/11318 www.osvdb.org
- http://www.osvdb.org/11319 Exploit, Patch
- http://www.osvdb.org/11320 Exploit, Patch
- http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt Exploit
- http://www.securityfocus.com/bid/11587 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17957 exchange.xforce.ibmcloud.com
- http://securitytracker.com/id?1012062 Exploit
- http://www.osvdb.org/11318 www.osvdb.org
- http://www.osvdb.org/11319 Exploit, Patch
- http://www.osvdb.org/11320 Exploit, Patch
- http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt Exploit
- http://www.securityfocus.com/bid/11587 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17957 exchange.xforce.ibmcloud.com