CVE-2004-1229 - Lapelled Arraignments

Description

Cross-site scripting vulnerability in the parser for Gadu-Gadu allows remote attackers to inject arbitrary web script or HTML via (1) http:// or (2) news:// URLs a different vulnerability than CVE-2004-1410.

Reference

http://www.man.poznan.pl/~security/gg-adv.txt http://www.securityfocus.com/bid/11899 http://www.osvdb.org/12517 http://secunia.com/advisories/13450 http://marc.info/?l=bugtraq&m=110295777306493&w=2