Unscored severity · published Dec 31, 2004
CVE-2004-2245
Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage…
–
CVSS
2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage parameter to viewpic.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GO
Goollery · Goollery
0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2245
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2245
Exploit
http://securitytracker.com/id?1012062
www.osvdb.org
http://www.osvdb.org/11318
Exploit
http://www.osvdb.org/11319
Exploit
http://www.osvdb.org/11320
Exploit
http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt
Exploit
http://www.securityfocus.com/bid/11587
More from Goollery
–
CVE-2004-2246
Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or web script via the conversation_id parameter to viewpic.php