CVE:CVE-2004-2246
CNNVD:CNNVD-200412-468
Goollery 0.04b之前版本存在跨站脚本(XSS)漏洞。远程攻击者可以借助viewpic.php的conversation_id参数注入任意HTML或web脚本。
solution:Upgrade goollery goollery to a higher version than 0.3,and avoid the version 0.3