Vulnerabilities > CVE-2001-1004 - Cross-Site Scripting vulnerability in Gnutella Client

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
gnutella

Summary

Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags.

Vulnerable Configurations

Part Description Count
Application
Gnutella
1