CVE ID:	CVE-2004-2245
Description:	Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage parameter to viewpic.php.
Test IDs:	1.3.6.1.4.1.25623.1.0.15717
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-2245 http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt BugTraq ID: 11587 http://www.securityfocus.com/bid/11587 http://www.osvdb.org/11318 http://www.osvdb.org/11319 http://www.osvdb.org/11320 http://securitytracker.com/id?1012062 XForce ISS Database: goollery-viewalbum-viewpic-xss(17957) http://xforce.iss.net/xforce/xfdb/17957

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: