CVE-2004-1410 Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL, which is echoed in a popup window that displays a parsing....
MediumCVSS 4.3
EPSS 1.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL, which is echoed in a popup window that displays a parsing error message, a different vulnerability than CVE-2004-1229.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gadu-gadu instant messenger | = 6.0_build149 | No fix listed |
| gadu-gadu instant messenger | = 6.0_build150 | No fix listed |
| gadu-gadu instant messenger | = 6.0_build151 | No fix listed |
| gadu-gadu instant messenger | = 6.0_build152 | No fix listed |
| gadu-gadu instant messenger | = 6.0_build153 | No fix listed |
| gadu-gadu instant messenger | = 6.0_build154 | No fix listed |
| gadu-gadu instant messenger | = 6.0_build155 | No fix listed |
References
- 20041217 Gadu-Gadu, another two bugs mailing-list
- 13450 third-party-advisory
- 12524 vdb-entry
- 11998 vdb-entry