CVE

Id
10671  
CVE No.
CVE-2004-2245  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage parameter to viewpic.php.  
Phase
Assigned (20050717)  
Votes
None (candidate not yet proposed)  
Comments