What’s Vulnerable › Vulnerabilities

CVE-2001-1004

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-08-31 · updated 2026-06-16

Description

Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags.

Affected products

• Gnutella Client: through 0.4.27

References

• http://archives.neohapsis.com/archives/bugtraq/2001-08/0415.html
• http://www.gnutelliums.com/linux_unix/gnut/ChangeLog.txt
• http://archives.neohapsis.com/archives/bugtraq/2001-08/0415.html
• http://www.gnutelliums.com/linux_unix/gnut/ChangeLog.txt

Get alerted when CVE-2001-1004 or the next vulnerability affects your stack