CVE-2004-2522

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Gattaca Server 2003 - Cross-Site Scripting2004-07-15 · webapps · cgi · Verified

Impact

Cross-site scripting (XSS) vulnerability in web.tmpl in Gattaca Server 2003 1.1.10.0 allows remote attackers to inject arbitrary web script or HTML via the (1) template or (2) language parameter.

Affected products

References

• NVD record
• CVE.org record
• http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt
• http://secunia.com/advisories/12071
• http://securitytracker.com/id?1010703
• http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0
• http://www.osvdb.org/7927
• http://www.securityfocus.com/bid/10731
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16701
• http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt
• http://secunia.com/advisories/12071
• http://securitytracker.com/id?1010703
• http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0
• http://www.osvdb.org/7927
• http://www.securityfocus.com/bid/10731
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16701