CVE-2005-2776

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-09-02 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Looking Glass 20040427 allow remote attackers to inject arbitrary web script or HTML via the (1) version[fullname], (2) version[homepage], or (3) version[no] parameter to footer.php, or the (4) version[fullname], (5) version[no], (6) version[author], (7) version[email] parameter to header.php.

Affected products

Looking Glass: 2004-04-27

References

http://de-neef.net/articles.php?id=2&page=2
http://marc.info/?l=bugtraq&m=112516327607001&w=2
http://rgod.altervista.org/lookingglass.html
http://secunia.com/advisories/16607/
http://www.securityfocus.com/bid/14680
https://exchange.xforce.ibmcloud.com/vulnerabilities/22044
http://de-neef.net/articles.php?id=2&page=2
http://marc.info/?l=bugtraq&m=112516327607001&w=2
http://rgod.altervista.org/lookingglass.html
http://secunia.com/advisories/16607/
http://www.securityfocus.com/bid/14680
https://exchange.xforce.ibmcloud.com/vulnerabilities/22044

Get alerted when CVE-2005-2776 or the next vulnerability affects your stack