CVE-2005-2776
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
02/09/2005
Last modified:
03/04/2025
Description
Multiple cross-site scripting (XSS) vulnerabilities in Looking Glass 20040427 allow remote attackers to inject arbitrary web script or HTML via the (1) version[fullname], (2) version[homepage], or (3) version[no] parameter to footer.php, or the (4) version[fullname], (5) version[no], (6) version[author], (7) version[email] parameter to header.php.
Impact
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:looking_glass:looking_glass:2004-04-27:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://de-neef.net/articles.php?id=2&page=2
- http://marc.info/?l=bugtraq&m=112516327607001&w=2
- http://rgod.altervista.org/lookingglass.html
- http://secunia.com/advisories/16607/
- http://www.securityfocus.com/bid/14680
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22044
- http://de-neef.net/articles.php?id=2&page=2
- http://marc.info/?l=bugtraq&m=112516327607001&w=2
- http://rgod.altervista.org/lookingglass.html
- http://secunia.com/advisories/16607/
- http://www.securityfocus.com/bid/14680
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22044