Lucene search
HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-2245
cve
2004
2245
cross-site scripting
xss
vulnerability
goollery 0.03
remote attackers
arbitrary html
web script
page parameter
viewalbum.php
btopage parameter
viewpic.php
nvd
5.9 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.065 Low
EPSS
Percentile
93.6%
Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage parameter to viewpic.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| goollery:goollery | goollery | eq | 0.3 |
Related
openvas
openvas
Goollery Multiple XSS
2005-11-03 00:00:00
Goollery Multiple XSS
2005-11-03 00:00:00
nessus
nessus
Goollery < 0.04b Multiple Vulnerabilities
2004-11-13 00:00:00
5.9 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.065 Low
EPSS
Percentile
93.6%
Related for CVE-2004-2245