CVE-2001-1004

Affected software: gnut Gnutella client prior to 0.4.27. Vulnerability: cross-site scripting via file names containing script tags shared with other clients. Root cause: untrusted file-name content is rendered as script on recipients. Impact: remote script execution on other clients (as described...

CVE-2001-1004

Cross-site scripting CSS vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags...