Vulnerability Details CVE-2005-2776
Multiple cross-site scripting (XSS) vulnerabilities in Looking Glass 20040427 allow remote attackers to inject arbitrary web script or HTML via the (1) version[fullname], (2) version[homepage], or (3) version[no] parameter to footer.php, or the (4) version[fullname], (5) version[no], (6) version[author], (7) version[email] parameter to header.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.5%
CVSS Severity
CVSS v2 Score 4.3
References
- http://de-neef.net/articles.php?id=2&page=2
- http://marc.info/?l=bugtraq&m=112516327607001&w=2
- http://rgod.altervista.org/lookingglass.html
- http://secunia.com/advisories/16607/
- http://www.securityfocus.com/bid/14680
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22044
- http://de-neef.net/articles.php?id=2&page=2
- http://marc.info/?l=bugtraq&m=112516327607001&w=2
- http://rgod.altervista.org/lookingglass.html
- http://secunia.com/advisories/16607/
- http://www.securityfocus.com/bid/14680
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22044
Products affected by CVE-2005-2776
-
cpe:2.3:a:looking_glass:looking_glass:2004-04-27