Search
Find a vulnerability
Search criteria
4 vulnerabilities by goollery
CVE-2004-2246 (GCVE-0-2004-2246)
Vulnerability from cvelistv5 – Published: 2005-07-17 04:00 – Updated: 2024-09-16 23:51
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or web script via the conversation_id parameter to viewpic.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/11624 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/ref/11/11624-goollery-viewpic.txt | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:22:13.181Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "11624",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/11624"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.osvdb.org/ref/11/11624-goollery-viewpic.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or web script via the conversation_id parameter to viewpic.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2005-07-17T04:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "11624",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/11624"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.osvdb.org/ref/11/11624-goollery-viewpic.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-2246",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or web script via the conversation_id parameter to viewpic.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "11624",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/11624"
},
{
"name": "http://www.osvdb.org/ref/11/11624-goollery-viewpic.txt",
"refsource": "MISC",
"url": "http://www.osvdb.org/ref/11/11624-goollery-viewpic.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-2246",
"datePublished": "2005-07-17T04:00:00.000Z",
"dateReserved": "2005-07-17T00:00:00.000Z",
"dateUpdated": "2024-09-16T23:51:56.224Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2004-2245 (GCVE-0-2004-2245)
Vulnerability from cvelistv5 – Published: 2005-07-17 04:00 – Updated: 2024-08-08 01:22
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage parameter to viewpic.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.osvdb.org/11318 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt | x_refsource_MISC |
| http://www.osvdb.org/11319 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/11587 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1012062 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/11320 | vdb-entryx_refsource_OSVDB |
Date Public
2004-11-03 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:22:13.559Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "goollery-viewalbum-viewpic-xss(17957)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17957"
},
{
"name": "11318",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/11318"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt"
},
{
"name": "11319",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/11319"
},
{
"name": "11587",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/11587"
},
{
"name": "1012062",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1012062"
},
{
"name": "11320",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/11320"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-11-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage parameter to viewpic.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "goollery-viewalbum-viewpic-xss(17957)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17957"
},
{
"name": "11318",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/11318"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt"
},
{
"name": "11319",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/11319"
},
{
"name": "11587",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/11587"
},
{
"name": "1012062",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1012062"
},
{
"name": "11320",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/11320"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-2245",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage parameter to viewpic.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "goollery-viewalbum-viewpic-xss(17957)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17957"
},
{
"name": "11318",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/11318"
},
{
"name": "http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt",
"refsource": "MISC",
"url": "http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt"
},
{
"name": "11319",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/11319"
},
{
"name": "11587",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/11587"
},
{
"name": "1012062",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1012062"
},
{
"name": "11320",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/11320"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-2245",
"datePublished": "2005-07-17T04:00:00.000Z",
"dateReserved": "2005-07-17T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:22:13.559Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2004-2246 (GCVE-0-2004-2246)
Vulnerability from nvd – Published: 2005-07-17 04:00 – Updated: 2024-09-16 23:51
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or web script via the conversation_id parameter to viewpic.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/11624 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/ref/11/11624-goollery-viewpic.txt | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:22:13.181Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "11624",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/11624"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.osvdb.org/ref/11/11624-goollery-viewpic.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or web script via the conversation_id parameter to viewpic.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2005-07-17T04:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "11624",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/11624"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.osvdb.org/ref/11/11624-goollery-viewpic.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-2246",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or web script via the conversation_id parameter to viewpic.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "11624",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/11624"
},
{
"name": "http://www.osvdb.org/ref/11/11624-goollery-viewpic.txt",
"refsource": "MISC",
"url": "http://www.osvdb.org/ref/11/11624-goollery-viewpic.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-2246",
"datePublished": "2005-07-17T04:00:00.000Z",
"dateReserved": "2005-07-17T00:00:00.000Z",
"dateUpdated": "2024-09-16T23:51:56.224Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2004-2245 (GCVE-0-2004-2245)
Vulnerability from nvd – Published: 2005-07-17 04:00 – Updated: 2024-08-08 01:22
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage parameter to viewpic.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.osvdb.org/11318 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt | x_refsource_MISC |
| http://www.osvdb.org/11319 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/11587 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1012062 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/11320 | vdb-entryx_refsource_OSVDB |
Date Public
2004-11-03 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:22:13.559Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "goollery-viewalbum-viewpic-xss(17957)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17957"
},
{
"name": "11318",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/11318"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt"
},
{
"name": "11319",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/11319"
},
{
"name": "11587",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/11587"
},
{
"name": "1012062",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1012062"
},
{
"name": "11320",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/11320"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-11-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage parameter to viewpic.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "goollery-viewalbum-viewpic-xss(17957)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17957"
},
{
"name": "11318",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/11318"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt"
},
{
"name": "11319",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/11319"
},
{
"name": "11587",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/11587"
},
{
"name": "1012062",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1012062"
},
{
"name": "11320",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/11320"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-2245",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage parameter to viewpic.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "goollery-viewalbum-viewpic-xss(17957)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17957"
},
{
"name": "11318",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/11318"
},
{
"name": "http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt",
"refsource": "MISC",
"url": "http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt"
},
{
"name": "11319",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/11319"
},
{
"name": "11587",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/11587"
},
{
"name": "1012062",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1012062"
},
{
"name": "11320",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/11320"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-2245",
"datePublished": "2005-07-17T04:00:00.000Z",
"dateReserved": "2005-07-17T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:22:13.559Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}